Cyber Resilience

CVE-2024-9131

High

Published: 10 January 2025

Published
10 January 2025
Modified
29 September 2025
KEV Added
—
Patch
—
CVSS Score v3.1 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0039 60.7th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-9131 is a high-severity Argument Injection (CWE-88) vulnerability in Arista Ng Firewall. Its CVSS base score is 7.2 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Network Device CLI (T1059.008); ranked in the top 39.3% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).

Deeper analysis

CVE-2024-9131 is a command injection vulnerability (CWE-88) that affects Arista products. Published on 2025-01-10, it carries a CVSS v3.1 base score of 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). The flaw enables a user with administrator privileges to perform command injection.

An attacker requires administrator privileges (PR:H) to exploit this vulnerability over the network (AV:N) with low attack complexity (AC:L) and no user interaction (UI:N). Successful exploitation results in high impacts to confidentiality, integrity, and availability (C:H/I:H/A:H) within the unchanged scope (S:U), potentially allowing full system compromise.

The Arista Security Advisory provides details on mitigation: https://www.arista.com/en/support/advisories-notices/security-advisory/20454-security-advisory-0105.

EU & UK References

Vulnerability details

A user with administrator privileges can perform command injection

CWE(s)
CWE-88

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1059.008 Network Device CLI Execution
Adversaries may abuse scripting or built-in command line interpreters (CLI) on network devices to execute malicious command and payloads.
attack.mitre.org →
Why these techniques?

Command injection (CWE-88) in Arista network device management interface directly enables arbitrary command execution via the Network Device CLI.

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

CVEs Like This One

CVE-2024-9134Same product: Arista Ng Firewall
CVE-2024-9188Same product: Arista Ng Firewall
CVE-2024-47520Same product: Arista Ng Firewall
CVE-2024-47519Same product: Arista Ng Firewall
CVE-2024-9132Same product: Arista Ng Firewall
CVE-2024-47518Same product: Arista Ng Firewall
CVE-2026-24061Shared CWE-88
CVE-2026-31230Shared CWE-88
CVE-2026-0634Shared CWE-88
CVE-2026-40113Shared CWE-88

Affected Assets

arista
ng firewall
≤ 17.1.1

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

SI-10 Information Input Validation good match
prevent

Directly mitigates command injection by validating all information inputs to prevent malicious command execution.

SI-2 Flaw Remediation good match
prevent

Addresses the specific vulnerability by requiring timely remediation through vendor patches as detailed in the Arista advisory.

AC-6 Least Privilege partial match
prevent

Limits the number of users with administrator privileges required for exploitation, reducing the attack surface.

References