ZDI-24-1720: (0Day) Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Arista NG Firewall. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the uvmlogin module. The issue results from incorrect authorization. An attacker can leverage this to escalate privileges to resources normally protected from the user.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of Arista NG Firewall. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.6. The following CVEs are assigned: CVE-2024-12831.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-1720?
ZDI-24-1720 is classified as a privilege escalation vulnerability.
How do I fix ZDI-24-1720?
To fix ZDI-24-1720, apply the latest updates provided by Arista for the NG Firewall.
Who is affected by ZDI-24-1720?
ZDI-24-1720 affects installations of Arista NG Firewall.
What prerequisites are needed to exploit ZDI-24-1720?
An attacker must first obtain the ability to execute low-privileged code on the target system to exploit ZDI-24-1720.
What type of vulnerability is ZDI-24-1720?
ZDI-24-1720 is a local privilege escalation vulnerability.