Skip to content
OpenAdvisories
Critical · 9.6 CVE-2024-27892 EUVD-2024-55613GHSA-r3vx-23r2-44c7

On affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected (SSL Profiles Enabled).

Published Jun 4, 2026 · Updated Jun 5, 2026 · Assigned by Arista

Vendor: Arista Networks Product: EOS Category: Network devices

Description

Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected. This can result in unexpected configuration being applied to the switch.

Affected products

VendorProductAffectedFixed
Arista Networks EOS 4.31.0 – ≤ 4.31.2F, 4.30.0 – ≤ 4.30.5M, 4.29.0 – ≤ 4.29.7M, 4.28.0 – ≤ 4.28.10M, 4.27.0 – ≤ 4.27.8M, 4.26.0 – ≤ 4.26.9M, 4.25.0 – ≤ 4.25.10M, 4.24.0 – ≤ 4.24.11M —

Advisories 1

References