Vulnerability Details
Basic Information
| Title | CVE-2025-2767 Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability |
|---|---|
| Type | cvelist |
| Published | 2025-04-23T16:51:13 |
| Last Seen | 2025-04-23T17:10:50 |
| CVSS Score | 8.8 (HIGH) |
CVSS v3 Details
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | REQUIRED |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
CVE Information
| CVE IDs | CVE-2025-2767 |
|---|---|
| CWE | CWE-79 |
| Bulletin Family | cve |
Description
Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Minimal user interaction is required to exploit…
Impact Assessment
| Base Score | 8.8 |
|---|---|
| Severity | HIGH |