CVE-2024-27890

creationtimestamp| type| source ---|---|--- 2026-06-04 23:37:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnis6aopqb2o 2026-06-05 02:04:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mnj2djhret23...

CVE-2024-27890

CVE-2024-27890 affects Arista EOS platforms with OpenConfig enabled; a gNMI Set request can be accepted when it should be rejected, causing unexpected configuration changes. Affected EOS versions include 4.29.x (≤4.29.7M), 4.28.x (≤4.28.10M), 4.27.x (≤4.27.8M), 4.26.x (≤4.26.9M), 4.25.x (≤4.25.10...

CVE-2024-27890 On affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected (No SSL Profiles Enabled).

Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected. This can result in unexpected configuration being applied to the switch...