CVE-2024-9134: Arista NG Firewall

High severity, CVSS 8.3. EPSS: 0.6% chance of exploitation in the next 30 days.

Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges.

Affected products

• Arista NG Firewall: before 17.2 (fixed in 17.2)

Published 2025-01-10. Last modified 2026-06-17.