Directory Traversal Remote Code Execution Flaw in Arista NG Firewall
CVE-2024-12830

7.3HIGH

Key Information:

Vendor

Arista Networks

Status
Ng Firewall
Vendor
CVE Published:
20 December 2024

What is CVE-2024-12830?

CVE-2024-12830 is a critical remote code execution vulnerability found in Arista NG Firewall, resulting from improper validation of user-supplied paths in the custom_handler method. This flaw allows unauthenticated remote attackers to execute arbitrary code in the context of the www-data user, posing significant risks to affected systems. Proper patching is essential to mitigate this vulnerability and protect against potential exploitation. For further details, refer to advisory ZDI-24-1718.

References

https://www.zerodayinitiative.com/advisories/ZDI-24-1718/

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.
CVE-2024-12830 : Directory Traversal Remote Code Execution Flaw in Arista NG Firewall