ZDI-CAN-24324: ZDI-24-1720: (0Day) Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Arista NG Firewall. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the uvmlogin module. The issue results from incorrect authorization. An attacker can leverage this to escalate privileges to resources normally protected from the user.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of Arista NG Firewall. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.6. The following CVEs are assigned: CVE-2024-12831.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-24324?
The ZDI-CAN-24324 vulnerability is classified as a high-severity privilege escalation flaw.
How do I fix ZDI-CAN-24324?
To fix ZDI-CAN-24324, apply the necessary patches or updates provided by Arista for the NG Firewall.
Who is affected by ZDI-CAN-24324?
ZDI-CAN-24324 affects installations of the Arista NG Firewall where local attackers can escalate privileges.
What does ZDI-CAN-24324 exploit?
ZDI-CAN-24324 exploits a flaw that allows attackers with low privileges to escalate their access level.
Can ZDI-CAN-24324 be exploited remotely?
No, ZDI-CAN-24324 requires local access to the system for exploitation.