CVE-2024-47517
CVE-2024-47517 is a medium-severity vulnerability in Arista Ng Firewall with a CVSS 3.x base score of 6.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-1230.
Key facts
- Severity: Medium (CVSS 3.x base score 6.8)
- EPSS exploit prediction: 0% (31st percentile)
- Actively exploited: Not listed in CISA KEV
- EU (EUVD) id: EUVD-2024-42714
- Weakness: CWE-1230
- Affected product: Arista Ng Firewall
- Published:
- Last modified:
Description
Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access
Frequently asked questions
- What is CVE-2024-47517?
- Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access
- How severe is CVE-2024-47517?
- CVE-2024-47517 has a CVSS 3.x base score of 6.8, rated medium severity. It is exploitable over network with low attack complexity, requires low privileges and user interaction. Impact on confidentiality is high, integrity low, and availability low.
- Is CVE-2024-47517 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (31st percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2024-47517?
- CVE-2024-47517 affects Arista Ng Firewall. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2024-47517?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- Does CVE-2024-47517 have an EU (EUVD) identifier?
- Yes. CVE-2024-47517 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-42714.
- When was CVE-2024-47517 published?
- CVE-2024-47517 was published on 2025-01-10 and last updated on 2026-06-17.
References
Affected products (1)
- cpe:2.3:a:arista:ng_firewall:*:*:*:*:*:*:*:*
More vulnerabilities in Arista Ng Firewall
- CVE-2025-2767 — Critical (CVSS 9.6): Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows…
- CVE-2024-9188 — High (CVSS 8.8): Specially constructed queries cause cross platform scripting leaking administrator tokens
- CVE-2024-12829 — High (CVSS 8.8): Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability. This vulnerability allows…
- CVE-2024-27889 — High (CVSS 8.8): Multiple SQL Injection vulnerabilities exist in the reporting application of the Arista Edge Threat Management - Arista…
- CVE-2024-9134 — High (CVSS 8.3): Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application…
- CVE-2024-47519 — High (CVSS 8.3): Backup uploads to ETM subject to man-in-the-middle interception
All CVEs affecting Arista Ng Firewall →
Other CWE-1230 vulnerabilities
- CVE-2024-9099 — High (CVSS 8.1): In lunary-ai/lunary version v1.4.29, the GET /projects API endpoint exposes both public and private API keys for all…
- CVE-2025-13084 — High (CVSS 7.6): The users endpoint in the groov View API returns a list of all users and associated metadata including their API keys.…
- CVE-2025-47324 — High (CVSS 7.5): Information disclosure while accessing and modifying the PIB file of a remote device via powerline.
- CVE-2025-0330 — High (CVSS 7.5): In berriai/litellm version v1.52.1, an issue in proxy_server.py causes the leakage of Langfuse API keys when an error…
- CVE-2024-53291 — High (CVSS 7.5): Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Exposure of Sensitive Information Through Metadata vulnerability. An…
- CVE-2025-30038 — High (CVSS 7.3): The vulnerability consists of a session ID leak when saving a file downloaded from CGM CLININET. The identifier is…