SB2025051721 - Multiple vulnerabilities in Arista Edge Threat Management

Description

This security bulletin contains information about 9 secuirty vulnerabilities.

1) Improper Neutralization of Argument Delimiters in a Command (CVE-ID: CVE-2024-9131)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to improper input validation when handling CLI arguments. A local user can escalate privileges on the system.

2) Code Injection (CVE-ID: CVE-2024-9132)

The vulnerability allows a remote privileged user to escalate privileges on the system.

The vulnerability exists due to improper input validation. A remote privileged user can configure execution of captive portal script and escalate privileges on the system.

3) Information disclosure (CVE-ID: CVE-2024-9133)

The vulnerability allows a remote user to gain access to potentially sensitive information.

The vulnerability exists due to an unspecified error. A remote user with administrator privileges can retrieve authentication tokens.

4) SQL injection (CVE-ID: CVE-2024-9134)

The vulnerability allows a remote user to execute arbitrary SQL queries in database.

The vulnerability exists due to insufficient sanitization of user-supplied data. A remote user with advanced report application access can send a specially crafted request to the affected application and execute arbitrary SQL commands within the application database.

5) Information disclosure (CVE-ID: CVE-2024-47517)

The vulnerability allows a remote user to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output by the application. Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access.

6) Files or Directories Accessible to External Parties (CVE-ID: CVE-2024-47518)

The vulnerability allows a remote user to gain access to sensitive information.

The vulnerability exists due to missing access restrictions. A remote user can send a specially crafted request to ETM and discover active remote access sessions.

7) Cleartext transmission of sensitive information (CVE-ID: CVE-2024-47519)

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to software uses insecure communication channel to transmit sensitive information. A remote attacker with ability to intercept network traffic can intercept Backup uploads to ETM.

8) Improper access control (CVE-ID: CVE-2024-47520)

The vulnerability allows a remote user to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions. A remote user with advanced report application access rights  can bypass implemented security restrictions and gain unauthorized access to the application.

9) Cross-site request forgery (CVE-ID: CVE-2024-9188)

The vulnerability allows a remote attacker to perform cross-site request forgery attacks.

The vulnerability exists due to insufficient validation of the HTTP request origin. A remote attacker can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website and obtain administrator tokens.

Successful exploitation of the vulnerability may lead to a system compromise.

Remediation

Install update from vendor's website.

References

• https://www.arista.com/en/support/advisories-notices/security-advisory/20454-security-advisory-0105