Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

Arista Edge Threat Management — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in Arista Edge Threat Management, with AI-generated Chinese analysis, references, and POCs.

Vendor: Arista Networks

CVE IDTitleCVSSSeverityPaused
CVE-2024-9188 Specially constructed queries cause cross platform scripting leaking administrator tokens 8.8 High2025-01-10
CVE-2024-47520 A user with advanced report application access rights can perform actions for which they are not authorized CWE-653 7.6 High2025-01-10
CVE-2024-47519 Backup uploads to ETM subject to man-in-the-middle interception CWE-322 8.3 High2025-01-10
CVE-2024-47518 Specially constructed queries targeting ETM could discover active remote access sessions CWE-552 6.4 Medium2025-01-10
CVE-2024-47517 Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access CWE-1230 6.8 Medium2025-01-10
CVE-2024-9134 Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges. CWE-89 8.3 High2025-01-10
CVE-2024-9133 A user with administrator privileges is able to retrieve authentication tokens CWE-287 6.6 Medium2025-01-10
CVE-2024-9132 The administrator is able to configure an insecure captive portal script CWE-94 8.1 High2025-01-10
CVE-2024-9131 A user with administrator privileges can perform command injection CWE-88 7.2 High2025-01-10

All 9 known CVE vulnerabilities affecting Arista Edge Threat Management with full Chinese analysis, references, and POCs where available.