Arista Networks Arista Edge Threat Management

• CVE-2024-9188 High 8.8 Specially constructed queries cause cross platform scripting leaking administrator tokens 0.5%
• CVE-2024-47520 High 7.6 A user with advanced report application access rights can perform actions for which they are not authorized 0.4%
• CVE-2024-47519 High 8.3 Backup uploads to ETM subject to man-in-the-middle interception 0.4%
• CVE-2024-47518 Medium 6.4 Specially constructed queries targeting ETM could discover active remote access sessions 0.4%
• CVE-2024-47517 Medium 6.8 Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access 0.4%
• CVE-2024-9134 High 8.3 Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges. 0.6%
• CVE-2024-9133 Medium 6.6 A user with administrator privileges is able to retrieve authentication tokens 0.2%
• CVE-2024-9132 High 8.1 The administrator is able to configure an insecure captive portal script 0.7%
• CVE-2024-9131 High 7.2 A user with administrator privileges can perform command injection 1.4%