Known vulnerabilities in Arista Edge Threat Management - Arista NG Firewall (NGFW)

Vendor: Arista Networks
Software: Arista Edge Threat Management - Arista NG Firewall (NGFW)
Software CPE: cpe:2.3:a:arista:ngfw:*:*:*:*:*:*:*:*
Website: https://www.arista.com/en/
Total vulnerabilities: 23
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Arista Edge Threat Management - Arista NG Firewall (NGFW) Arista Edge Threat Management - Arista NG Firewall (NGFW) is affected by 23 known vulnerabilities: 3 high, 5 medium, 15 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126175 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-25620		 CWE-78 Low
No
No
 17.4.1 15.04.2026 SB20260415109
#VU126176 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-25621		 CWE-78 Low
No
No
 17.4.1 15.04.2026 SB20260415109
#VU126177 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-25622		 CWE-78 Low
No
No
 17.4.1 15.04.2026 SB20260415109
#VU126178 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-25623		 CWE-78 Low
No
No
 17.4.1 15.04.2026 SB20260415109
#VU126179 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-25624		 CWE-79 Low
No
No
 17.4.1 15.04.2026 SB20260415109
#VU119092 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-6978		 CWE-78 Low
No
No
 17.4, 17.4.1 03.12.2025 SB2025120317
SB20260415109
#VU119091 - Improper Authentication
CVE-2025-6979		 CWE-287 High
No
No
 17.4 03.12.2025 SB2025120317
#VU119090 - Exposure of sensitive information to an unauthorized actor
CVE-2025-6980		 CWE-200 Medium
No
No
 17.4 03.12.2025 SB2025120317
#VU109379 - Cross-Site Request Forgery (CSRF)
CVE-2024-9188		 CWE-352 High
No
No
 17.2 17.05.2025 SB2025051721
#VU109378 - Improper Access Control
CVE-2024-47520		 CWE-284 Medium
No
No
 17.2 17.05.2025 SB2025051721
#VU109377 - Cleartext Transmission of Sensitive Information
CVE-2024-47519		 CWE-319 Medium
No
No
 17.2 17.05.2025 SB2025051721
#VU109376 - Files or Directories Accessible to External Parties
CVE-2024-47518		 CWE-552 Low
No
No
 17.2 17.05.2025 SB2025051721
#VU109375 - Exposure of sensitive information to an unauthorized actor
CVE-2024-47517		 CWE-200 Low
No
No
 17.2 17.05.2025 SB2025051721
#VU109374 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-9134		 CWE-89 Medium
No
No
 17.2 17.05.2025 SB2025051721
#VU109373 - Exposure of sensitive information to an unauthorized actor
CVE-2024-9133		 CWE-200 Low
No
No
 17.2 17.05.2025 SB2025051721
#VU109372 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-9132		 CWE-94 Low
No
No
 17.2 17.05.2025 SB2025051721
#VU109371 - Argument Injection or Modification
CVE-2024-9131		 CWE-88 Low
No
No
 17.2 17.05.2025 SB2025051721
#VU106037 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-2767		 CWE-79 Low
No
No
 - 26.03.2025 SB2025032620
#VU102354 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-12832		 CWE-89 Medium
No
No
 - 06.01.2025 SB2025010636
#VU102353 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12830		 CWE-22 High
No
No
 - 06.01.2025 SB2025010636


Showing elements 1 - 20 out of 23