This vulnerability (CVE-2024-27892) in Arista EOS arises from missing authentication controls on critical functions related to gNMI Set requests when OpenConfig is enabled. An attacker with at least low privileges can send a gNMI Set request that should have been rejected, resulting in unauthorized configuration changes on the switch. The issue affects multiple EOS versions from 4.24.0 to 4.31.0. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no user interaction, and high impact on integrity and availability. No official remediation or patch has been documented by Arista at this time.

Successful exploitation allows an attacker with low privileges to apply unexpected configurations to the switch, potentially disrupting network operations or compromising device integrity. The impact affects the integrity and availability of the device configuration. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to gNMI interfaces and enforce strict access controls to limit who can send configuration requests. Monitor for unusual configuration changes. Follow Arista Networks' advisories for updates on patches or mitigations.