An input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Authenticated administrators can leverage this exposure to obtain underlying terminal script code processing execution permissions.
A successful attack requires high-privileged authenticated management interface configuration access to the NGFW web platform.
Per operational best practice security models, do not allow unauthorized administrative access to the administrative browser.
The recommended resolution is to upgrade to NGFW Version 17.4.1 at your earliest convenience.