What is CVE-2024-12832?

CVE-2024-12832 is a medium-severity vulnerability in Arista Ng Firewall, classified under SQL Injection. CVSS score: 6.3/10. Published 2024-12-20.

How severe is CVE-2024-12832?

Medium severity. CVSS v3 base score is 6.3 out of 10.

SQL Injection in Arista Ng Firewall

CVE-2024-12832

Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability. This vulnerability allows remote attackers to create arbitrary files and disclose sensitive information on affected installations of Arista NG Firewa…

Vulnerability class: SQL Injection

EPSS: 0.005 (38.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.

Affected products

Arista Ng Firewall — versions 17.1.1
Arista Ng_firewall — versions 17.1.1

Weakness classification (CWE)

CWE-89 — SQL Injection

References

zdi-disclosures@trendmicro.com (x_research-advisory, Third Party Advisory)

Frequently asked questions

What is CVE-2024-12832?: CVE-2024-12832 is a medium-severity vulnerability in Arista Ng Firewall, classified under SQL Injection. CVSS score: 6.3/10. Published 2024-12-20.
How severe is CVE-2024-12832?: Medium severity. CVSS v3 base score is 6.3 out of 10.