Deep Dive into Arista NG Firewall Vulnerabilities
bishopfox.com | research | #cloud | #rce | #command-injection | #firewall | #arista | #cve-2025-6978 | #root-access | #vulnerability-advisory
Summary
Bishop Fox found six vulnerabilities in Arista NG Firewall 17.4, including command injections that yield root access and a chain to RCE via a malicious URL; organizations should update to 17.4.1.
- Published
- Collected
--- id: 3844 title: "Deep Dive into Arista NG Firewall Vulnerabilities" source_domain: bishopfox.com source_url: "https://bishopfox.com/blog/arista-nextgen-firewall-version-17-4-advisory" published_at: "2026-02-09 00:00" tags: ["cloud", "rce", "command-injection", "firewall", "arista", "cve-2025-6978", "root-access", "vulnerability-advisory"] phying_url: "https://phying.com/item/3844" lang: en --- # Deep Dive into Arista NG Firewall Vulnerabilities ## Summary Bishop Fox found six vulnerabilities in Arista NG Firewall 17.4, including command injections that yield root access and a chain to RCE via a malicious URL; organizations should update to 17.4.1. ## Intelligence Metadata - **Sources:** bishopfox.com - **Published:** 2026-02-09 00:00 - **Original:** https://bishopfox.com/blog/arista-nextgen-firewall-version-17-4-advisory - **Phying News:** https://phying.com/item/3844