CVE-2023-24512 On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch.

[
  {
    "vendor": "Arista Networks",
    "product": "Terminattr",
    "versions": [
      {
        "version": "1.23.0",
        "status": "affected"
      },
      {
        "version": "unspecified",
        "lessThanOrEqual": "1.19.5",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "1.24.0",
        "status": "affected",
        "lessThanOrEqual": "1.24.3",
        "versionType": "custom"
      },
      {
        "version": "1.22.0",
        "status": "affected",
        "lessThanOrEqual": "1.22.1",
        "versionType": "custom"
      }
    ]
  }
]