Arista Edge Threat Management - Arista Next Generation Firewall (NGFW) vulnerabilities

An input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW), allowing authenticated administrators to obtain underlying terminal script code processing execution permissions.

A command injection vulnerability exists in the Captive Portal Custom Handler of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW), allowing an authenticated administrator to execute arbitrary platform shell commands.

An encrypted password command injection vulnerability exists in the Captive Portal application framework of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW) version 17.4.0, allowing execution of arbitrary shell commands.