CVE-2024-4578

This Advisory describes an issue that impacts Arista Wireless Access Points. Any entity with the ability to authenticate via SSH to an affected AP as the “config” user is able to cause a privilege escalation via spawning a bash shell. The SSH CLI session does not require high permissions to exploit this vulnerability, but the config password is required to establish the session. The spawned shell is able to obtain root privileges.

• CWE-77

• https://www.arista.com/en/support/advisories-notices/security-advisory/19844-security-advisory-0098
• https://www.arista.com/en/support/advisories-notices/security-advisory/19844-security-advisory-0098

Published

Jun 27, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-45774A flaw was found in grub2. A specially crafted JPEG file can…6.7
• CVE-2024-45775A flaw was found in grub2 where the grub_extcmd_dispatcher()…5.2
• CVE-2024-45776When reading the language .mo file in grub_mofile_open(), gr…6.7
• CVE-2024-45777A flaw was found in grub2. The calculation of the translatio…6.7
• CVE-2024-45778A stack overflow flaw was found when reading a BFS file syst…5.5
• CVE-2024-45779An integer overflow flaw was found in the BFS file system dr…6
• CVE-2024-45780A flaw was found in grub2. When reading tar files, grub2 all…6.7
• CVE-2024-45781A flaw was found in grub2. When reading a symbolic link's na…6.7
• CVE-2024-45782A flaw was found in the HFS filesystem. When reading an HFS …7.8
• CVE-2024-45783A flaw was found in grub2. When failing to mount an HFS+ gru…4.4
• CVE-2024-45784Apache Airflow versions before 2.10.3 contain a vulnerabilit…7.5
• CVE-2024-45785MUSASI version 3 contains an issue with use of client-side a…7.5