CVE-2024-27892
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
On affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected (SSL Profiles Enabled).
Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected. This can result in unexpected configuration being applied to the switch.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
EOS
- Vendor
- Arista Networks
- Product
- EOS
- Platforms
- 710 Series
- 720D Series
- 720XP/722XPM Series
- 750X Series
- 7010 Series
- 7010X Series
- 7020R Series
- 7130 Series running EOS
- 7150 Series
- 7160 Series
- 7170 Series
- 7050X/X2/X3/X4 Series
- 7060X/X2/X4/X5/X6 Series
- 7250X Series
- 7260X/X3 Series
- 7280E/R/R2/R3 Series
- 7300X/X3 Series
- 7320X Series
- 7358X4 Series
- 7368X4 Series
- 7388X5 Series
- 7500E/R/R2/R3 Series
- 7800R3 Series
- CloudEOS
- cEOS-lab
- vEOS-lab
- AWE 5000 Series
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 4.31.0 | affected | custom | Unavailable | 4.31.2F | None listed |
| 4.30.0 | affected | custom | Unavailable | 4.30.5M | None listed |
| 4.29.0 | affected | custom | Unavailable | 4.29.7M | None listed |
| 4.28.0 | affected | custom | Unavailable | 4.28.10M | None listed |
| 4.27.0 | affected | custom | Unavailable | 4.27.8M | None listed |
| 4.26.0 | affected | custom | Unavailable | 4.26.9M | None listed |
| 4.25.0 | affected | custom | Unavailable | 4.25.10M | None listed |
| 4.24.0 | affected | custom | Unavailable | 4.24.11M | None listed |