CVE-2024-27890 On affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected (No SSL Profiles Enabled).

[
  {
    "vendor": "Arista Networks",
    "product": "EOS",
    "platforms": [
      "710 Series",
      "720D Series",
      "720XP/722XPM Series",
      "750X Series",
      "7010 Series",
      "7010X Series",
      "7020R Series",
      "7130 Series running EOS",
      "7150 Series",
      "7160 Series",
      "7170 Series",
      "7050X/X2/X3/X4 Series",
      "7060X/X2/X4/X5/X6 Series",
      "7250X Series",
      "7260X/X3 Series",
      "7280E/R/R2/R3 Series",
      "7300X/X3 Series",
      "7320X Series",
      "7358X4 Series",
      "7368X4 Series",
      "7388X5 Series",
      "7500E/R/R2/R3 Series",
      "7800R3 Series",
      "CloudEOS",
      "cEOS-lab",
      "vEOS-lab",
      "AWE 5000 Series"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "4.29.0",
        "lessThanOrEqual": "4.29.7M",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.28.0",
        "lessThanOrEqual": "4.28.10M",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.27.0",
        "lessThanOrEqual": "4.27.8M",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.26.0",
        "lessThanOrEqual": "4.26.9M",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.25.0",
        "lessThanOrEqual": "4.25.10M",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.24.0",
        "lessThanOrEqual": "4.24.11M",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]