CVE-2024-27889

Summary

CVE-2024-27889 is a newly disclosed SQL Injection vulnerability affecting the reporting application of Arista Edge Threat Management - Arista NG Firewall (NGFW). An attacker with advanced report application access can exploit this vulnerability to inject malicious SQL commands, potentially gaining elevated privileges and executing operating system commands. This poses a significant security risk, as it allows unauthorized access and control beyond the intended scope of the application. Organizations using this product are advised to apply patches or updates as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.