CVE Tools
Sign in
Back to feed
Research Next Generation Firewall (NGFW) rce Arista network-edge

Arista Firewall XSS to RCE Chain

Bishop Fox·By Jon Williams, Ronan Kervella, Bishop Fox Researchers··6 min read

Summary

Last week*, Arista disclosed that its Next Generation Firewall (NGFW) appliances are affected by three high-severity vulnerabilities: sensitive information disclosure (CVE-2025-6980), authentication bypass (CVE-2025-6979), and command injection (CVE-2025-6978). The vendor released a patch (software version 17.4) to address these issues.…

Continue reading on Bishop Fox

Related coverage

Other stories on the same CVEs
No other coverage for these CVEs yet.
Worried this affects your company?

See what your business actually exposes to the Internet — a free external review, no install, no obligation.

Check my exposure