CVE-2024-12831: (0Day) Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability
Arista NG Firewall uvmlogin Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Arista NG Firewall. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the uvmlogin module. The issue results from incorrect authorization. An attacker can leverage this to escalate privileges to resources normally protected from the user. Was ZDI-CAN-24324.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12831?
CVE-2024-12831 is considered a high-severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2024-12831?
To fix CVE-2024-12831, update the Arista NG Firewall to version 17.1.2 or later where the vulnerability is addressed.
Who is affected by CVE-2024-12831?
CVE-2024-12831 affects users of the Arista NG Firewall running version 17.1.1.
What type of vulnerability is CVE-2024-12831?
CVE-2024-12831 is an incorrect authorization privilege escalation vulnerability.
Can CVE-2024-12831 be exploited remotely?
No, CVE-2024-12831 requires local access to the system to exploit the vulnerability.