CVE-2024-12831

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-12831", "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "state": "PUBLISHED", "assignerShortName": "zdi", "dateReserved": "2024-12-19T22:19:59.640Z", "datePublished": "2024-12-20T00:05:49.863Z", "dateUpdated": "2024-12-20T17:37:50.042Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "shortName": "zdi", "dateUpdated": "2024-12-20T00:05:49.863Z"}, "title": "Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability", "descriptions": [{"lang": "en", "value": "Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Arista NG Firewall. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the uvm_login module. The issue results from incorrect authorization. An attacker can leverage this to escalate privileges to resources normally protected from the user. Was ZDI-CAN-24324."}], "affected": [{"vendor": "Arista", "product": "NG Firewall", "versions": [{"version": "17.1.1", "status": "affected"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-863", "description": "CWE-863: Incorrect Authorization", "type": "CWE"}]}], "references": [{"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1720/", "name": "ZDI-24-1720", "tags": ["x_research-advisory"]}], "dateAssigned": "2024-12-19T22:19:59.705Z", "datePublic": "2024-12-19T23:29:01.914Z", "source": {"lang": "en", "value": "Mehmet INCE (@mdisec) from PRODAFT.com"}, "metrics": [{"format": "CVSS", "cvssV3_0": {"version": "3.0", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L", "baseScore": 6.6, "baseSeverity": "MEDIUM"}}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-12-20T16:32:32.742013Z", "id": "CVE-2024-12831", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-20T17:37:50.042Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-12831", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-12-20T16:32:32.742013Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-20T16:32:33.993Z"}}], "cna": {"title": "Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability", "source": {"lang": "en", "value": "Mehmet INCE (@mdisec) from PRODAFT.com"}, "metrics": [{"format": "CVSS", "cvssV3_0": {"version": "3.0", "baseScore": 6.6, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L"}}], "affected": [{"vendor": "Arista", "product": "NG Firewall", "versions": [{"status": "affected", "version": "17.1.1"}], "defaultStatus": "unknown"}], "datePublic": "2024-12-19T17:29:01.914-06:00", "references": [{"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1720/", "name": "ZDI-24-1720", "tags": ["x_research-advisory"]}], "dateAssigned": "2024-12-19T16:19:59.705-06:00", "descriptions": [{"lang": "en", "value": "Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Arista NG Firewall. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the uvm_login module. The issue results from incorrect authorization. An attacker can leverage this to escalate privileges to resources normally protected from the user. Was ZDI-CAN-24324."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-863", "description": "CWE-863: Incorrect Authorization"}]}], "providerMetadata": {"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "shortName": "zdi", "dateUpdated": "2024-12-20T00:05:49.863Z"}}}, "cveMetadata": {"cveId": "CVE-2024-12831", "state": "PUBLISHED", "dateUpdated": "2024-12-20T17:37:50.042Z", "dateReserved": "2024-12-19T22:19:59.640Z", "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "datePublished": "2024-12-20T00:05:49.863Z", "assignerShortName": "zdi"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "NG Firewall", "vendor": "Arista", "versions": [{"status": "affected", "version": "17.1.1"}]}], "source": "zdi-disclosures@trendmicro.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:arista:ng_firewall:17.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "0BC15A9D-C423-4623-8940-9FE3744F4B4F", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Arista NG Firewall. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the uvm_login module. The issue results from incorrect authorization. An attacker can leverage this to escalate privileges to resources normally protected from the user. Was ZDI-CAN-24324."}, {"lang": "es", "value": "Vulnerabilidad de aumento de privilegios de autorizaci\u00f3n incorrecta en el m\u00f3dulo uvm_login de Arista NG Firewall. Esta vulnerabilidad permite a los atacantes locales aumentar los privilegios en las instalaciones afectadas de Arista NG Firewall. Un atacante primero debe obtener la capacidad de ejecutar c\u00f3digo con poco nivel de privilegios en el sistema de destino para explotar esta vulnerabilidad. La falla espec\u00edfica existe dentro del m\u00f3dulo uvm_login. El problema es el resultado de una autorizaci\u00f3n incorrecta. Un atacante puede aprovechar esto para aumentar los privilegios a recursos que normalmente est\u00e1n protegidos del usuario. Era ZDI-CAN-24324."}], "id": "CVE-2024-12831", "lastModified": "2026-06-17T07:00:35.837", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 6.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L", "version": "3.0"}, "exploitabilityScore": 1.8, "impactScore": 4.7, "source": "zdi-disclosures@trendmicro.com", "type": "Secondary"}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-12831", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2024-12-20T16:32:32.742013Z", "version": "2.0.3"}}]}, "published": "2024-12-20T01:15:06.670", "references": [{"source": "zdi-disclosures@trendmicro.com", "tags": ["Third Party Advisory"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1720/"}], "sourceIdentifier": "zdi-disclosures@trendmicro.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-863"}], "source": "zdi-disclosures@trendmicro.com", "type": "Secondary"}]}

{}

{}