ZDI-24-364: Arista NG Firewall ReportEntry SQL Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2024-27889.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-364?
The ZDI-24-364 vulnerability has a CVSS rating of 8.8, indicating a high severity level.
How do I fix ZDI-24-364?
To mitigate ZDI-24-364, ensure that your Arista NG Firewall is updated to the latest version that addresses this vulnerability.
What type of attacks can exploit ZDI-24-364?
ZDI-24-364 allows remote attackers to execute arbitrary code on affected Arista NG Firewall installations, but requires authentication.
Which software is affected by ZDI-24-364?
The vulnerability ZDI-24-364 affects installations of Arista NG Firewall.
Is authentication required to exploit ZDI-24-364?
Yes, authentication is required to exploit the ZDI-24-364 vulnerability.