CVE-2024-47520

EPSS 0.13%
Published 10.01.2025 22:15:26
Last modified 29.09.2025 12:32:54
Source psirt@arista.com
Teams watchlist Login
Open Login

A user with advanced report application access rights can perform actions for which they are not authorized

Affected products Warnungen 0 Metrics 2 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Arista ≫ Ng Firewall Version <= 17.1.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.13%	0.334

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
psirt@arista.com	7.6	2.1	5.5	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

CWE-653 Improper Isolation or Compartmentalization

The product does not properly compartmentalize or isolate functionality, processes, or resources that require different privilege levels, rights, or permissions.

https://www.arista.com/en/support/advisories-notices/security-advisory/20454-security-advisory-0105

Vendor Advisory

Mitigation

https://nvd.nist.gov/vuln/detail/CVE-2024-47520

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-47520

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-47520

EUVD