Loading HuntDB...

GHSA-jphv-3r8c-vvcp

GitHub Security Advisory

⚠ Unreviewed HIGH Has CVE

Advisory Details

Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Authentication is required to exploit this vulnerability.

The specific flaw exists within the ExecManagerImpl class. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-24015.

Related CVEs

Key Information

GHSA ID
GHSA-jphv-3r8c-vvcp
Published
December 20, 2024 3:30 AM
Last Modified
December 20, 2024 3:30 AM
CVSS Score
7.5 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: July 9, 2025 6:27 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.