CVE-2024-12831: medium-severity vulnerability in Arista NG Firewall
Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.6epss 0.2%
Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Arista NG Firewall. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the uvm_login module. The issue results from incorrect authorization. An attacker can leverage this to escalate privileges to resources normally protected from the user. Was ZDI-CAN-24324.
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Affected products
Arista · NG FirewallRelated CVEs — Arista NG Firewall
In the same product, most dangerous first.
CVE-2024-12829HIGHArista NG Firewall ExecManagerImpl Command Injection Remote Code Execution VulnerabilityEPSS 1.3%CVE-2024-12830HIGHArista NG Firewall custom_handler Directory Traversal Remote Code Execution VulnerabilityEPSS 1.0%CVE-2025-2767HIGHArista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution VulnerabilityEPSS 0.7%CVE-2024-12832HIGHArista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write VulnerabilityEPSS 0.5%