CVE-2024-27892

Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected. This can result in unexpected configuration being applied to the switch.

Score

CVSS 3.1 9.6 Critical

Status

Awaiting Analysis - psirt@arista.com

Published

2026-06-04

Last modified

2026-06-05

Weaknesses

CWE-306

Affected products

• Eos (Arista Networks)

References

• https://www.arista.com/en/support/advisories-notices/security-advisory/19862-security-advisory-0099