Arista Ng Firewall — known CVE vulnerabilities

Every CVE whose affected-product data names Arista Ng Firewall, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (20)

• CVE-2025-2767 — CVSS 9.6 (critical): Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to…
• CVE-2024-9188 — CVSS 8.8 (high): Specially constructed queries cause cross platform scripting leaking administrator tokens
• CVE-2024-27889 — CVSS 8.8 (high): Multiple SQL Injection vulnerabilities exist in the reporting application of the Arista Edge Threat Management - Arista NG Firewall (NGFW)…
• CVE-2024-12829 — CVSS 8.8 (high): Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to…
• CVE-2024-47519 — CVSS 8.3 (high): Backup uploads to ETM subject to man-in-the-middle interception
• CVE-2024-9134 — CVSS 8.3 (high): Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can…
• CVE-2024-9132 — CVSS 8.1 (high): The administrator is able to configure an insecure captive portal script
• CVE-2024-12831 — CVSS 7.8 (high): Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows local attackers to…
• CVE-2024-47520 — CVSS 7.6 (high): A user with advanced report application access rights can perform actions for which they are not authorized
• CVE-2024-12830 — CVSS 7.3 (high): Arista NG Firewall custom_handler Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to…
• CVE-2024-9131 — CVSS 7.2 (high): A user with administrator privileges can perform command injection
• CVE-2024-47517 — CVSS 6.8 (medium): Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access
• CVE-2024-9133 — CVSS 6.6 (medium): A user with administrator privileges is able to retrieve authentication tokens
• CVE-2024-47518 — CVSS 6.4 (medium): Specially constructed queries targeting ETM could discover active remote access sessions
• CVE-2024-12832 — CVSS 6.3 (medium): Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability. This vulnerability allows remote attackers to…
• CVE-2026-25620 — CVSS 6.0 (medium): An encrypted password command injection vulnerability exists in the Captive Portal application framework of Arista Edge Threat Management -…
• CVE-2026-25621 — CVSS 6.0 (medium): A Reports application infrastructure vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall (NGFW) due to…
• CVE-2026-25622 — CVSS 6.0 (medium): A Captive Portal Custom Handler command injection vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall…
• CVE-2026-25623 — CVSS 6.0 (medium): An input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Threat Management - Arista…
• CVE-2026-25624 — CVSS 5.7 (medium): An administrative cross-site scripting (XSS) vulnerability exists in the web user interface dashboard layout of Arista Edge Threat…