Arista Networks Arista Edge Threat Management vulnerabilities
9 vulnerabilities
Known vulnerabilities in Arista Networks Arista Edge Threat Management, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2024-47520arista networksarista edge threat management+1
EPSS score0.43%
A user with advanced report application access rights can perform actions for which they are not authorizedCVE-2024-47517arista networksarista edge threat management+1EPSS score0.41%
Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM accessCVE-2024-47518arista networksarista edge threat management+1EPSS score0.44%
Specially constructed queries targeting ETM could discover active remote access sessionsCVE-2024-47519arista networksarista edge threat management+1EPSS score0.35%
Backup uploads to ETM subject to man-in-the-middle interceptionCVE-2024-9188arista networksarista edge threat management+1EPSS score0.50%
Specially constructed queries cause cross platform scripting leaking administrator tokensCVE-2024-9133arista networksarista edge threat management+1EPSS score0.16%
A user with administrator privileges is able to retrieve authentication tokensCVE-2024-9134arista networksarista edge threat management+1EPSS score0.64%
Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges.CVE-2024-9132arista networksarista edge threat management+1EPSS score0.70%
The administrator is able to configure an insecure captive portal scriptCVE-2024-9131arista networksarista edge threat management+1EPSS score1.42%
A user with administrator privileges can perform command injection