---
id: 3844
title: "Deep Dive into Arista NG Firewall Vulnerabilities"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/arista-nextgen-firewall-version-17-4-advisory"
published_at: "2026-02-09 00:00"
tags: ["cloud", "rce", "command-injection", "firewall", "arista", "cve-2025-6978", "root-access", "vulnerability-advisory"]
phying_url: "https://phying.com/item/3844"
lang: en
---

# Deep Dive into Arista NG Firewall Vulnerabilities

## Summary

Bishop Fox found six vulnerabilities in Arista NG Firewall 17.4, including command injections that yield root access and a chain to RCE via a malicious URL; organizations should update to 17.4.1.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2026-02-09 00:00
- **Original:** https://bishopfox.com/blog/arista-nextgen-firewall-version-17-4-advisory
- **Phying News:** https://phying.com/item/3844