RCE in Arista Networks Wireless Access Points
CVE-2024-4578
This Advisory describes an issue that impacts Arista Wireless Access Points. Any entity with the ability to authenticate via SSH to an affected AP as the “config” user is able to cause a privilege escalation via spawning a bash shell. The SSH CLI session does not require high permissions to exploit this vulnerability, but the config password is required to establish the session. The spawned shell is able to obtain root privileges.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.005 (39.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.4 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H.
Affected products
- Arista Networks Wireless Access Points — versions 13.0.2.x, 15.x, 16.x
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2024-4578?
- CVE-2024-4578 is a high-severity vulnerability in Arista Networks Wireless Access Points, classified under Command Injection. CVSS score: 8.4/10. Published 2024-06-27.
- How severe is CVE-2024-4578?
- High severity. CVSS v3 base score is 8.4 out of 10.
- Is CVE-2024-4578 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.