CVE-2024-9131 A user with administrator privileges can perform command injection
Administrators can execute arbitrary commands on Arista Edge Threat Management devices, potentially compromising system integrity.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-9131?
CVE-2024-9131 is a high-severity command injection vulnerability in Arista Edge Threat Management, published on 10 Jan 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A user with administrator privileges can perform command injection
Weakness: CWE-88
Which versions are affected by CVE-2024-9131?
It affects 1 product.
Products include Arista Ng Firewall.
How do I fix CVE-2024-9131?
No fix has been published for CVE-2024-9131 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2024-9131 being exploited?
There is no known exploitation of CVE-2024-9131 in the wild and no public exploit code.
Other vulnerabilities in Arista Edge Threat Management
- CVE-2025-2767 Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability
- CVE-2024-9188 Specially constructed queries cause cross platform scripting leaking administrator tokens
- CVE-2024-27889 SQL injection in Arista Edge Threat Management - Arista NG Firewall (NGFW)
- CVE-2024-47519 Backup uploads to ETM subject to man-in-the-middle interception
- CVE-2024-9134 SQL injection in Arista Edge Threat Management
Sources
Also known as GHSA-58g8-rmmq-338r.