Vulnerability · Published Dec 20, 2024 · Assigned by zdi

CVE-2024-12832Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability

High 8.3

In plain English

A high-severity SQL injection in NG Firewall from Arista. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities).

Severity (CVSS 3.0)8.3High

Exploit odds (30 days)0.5%top 57.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability. This vulnerability allows remote attackers to create arbitrary files and disclose sensitive information on affected installations of Arista NG Firewall. Authentication is required to exploit this vulnerability. The specific flaw exists within the ReportEntry class. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the www-data user. Was ZDI-CAN-24325.

Affected products (as reported)

Vendor	Product	Versions
Arista	NG Firewall	17.1.1

Weakness: CWE-89 · Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

References

ZDI-24-1719 x_research-advisory