Multiple SQL Injection vulnerabilities exist in the reporting application of the Arista Edge Threat Management - Arista NG Firewall (NGFW).

Multiple SQL Injection vulnerabilities exist in the reporting application of the Arista Edge Threat Management - Arista NG Firewall (NGFW). A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SQL命令中使用的特殊元素转义处理不恰当(SQL注入)

Arista Networks Edge Threat Management 安全漏洞

Arista Networks Edge Threat Management是美国Arista Networks公司的一种网络安全解决方案。 Arista Networks Edge Threat Management 存在安全漏洞，该漏洞源于存在多个SQL注入漏洞。攻击者可利用该漏洞提升权限，并在底层操作系统上执行命令。

N/A

N/A