Security Advisory 0099

Security Advisory 0099

Severity

8

CVSS

(AV:N/AC:L/Au:S/C:N/I:C/A:C)

Published

07/25/2024

Created

09/10/2024

Added

09/05/2024

Modified

12/17/2024

Description

This advisory addresses two vulnerabilities (CVE-2024-27892 and CVE-2024-27890) in Arista EOS with OpenConfig configured. These vulnerabilities allow unauthorized gNMI Set requests, potentially resulting in unexpected configuration changes on affected switches. The issues were discovered internally and no malicious uses have been reported in customer networks.

Solution(s)

• upgrade-solution-CVE-2024-27892

References

• https://attackerkb.com/topics/cve-2024-27892
• CVE - 2024-27892
• https://www.arista.com//en/support/advisories-notices/security-advisory/19862-security-advisory-0099