CVE-2024-9133 A user with administrator privileges is able to retrieve authentication tokens
Administrators can retrieve authentication tokens, potentially leading to account takeover and unauthorized access to the Arista Edge Threat Management system.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-9133?
CVE-2024-9133 is a medium-severity vulnerability in Arista Edge Threat Management, published on 10 Jan 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A user with administrator privileges is able to retrieve authentication tokens
Weakness: CWE-287
Which versions are affected by CVE-2024-9133?
It affects 1 product.
Products include Arista Ng Firewall.
How do I fix CVE-2024-9133?
No fix has been published for CVE-2024-9133 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-9133 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-9133 exists.
Other vulnerabilities in Arista Edge Threat Management
- CVE-2025-2767 Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability
- CVE-2024-9188 Specially constructed queries cause cross platform scripting leaking administrator tokens
- CVE-2024-27889 SQL injection in Arista Edge Threat Management - Arista NG Firewall (NGFW)
- CVE-2024-47519 Backup uploads to ETM subject to man-in-the-middle interception
- CVE-2024-9134 SQL injection in Arista Edge Threat Management
Sources
Also known as GHSA-q4xf-7mgc-p628.