On affected Arista EOS platforms with AAA-based gRPC authorization enabled for OpenConfig, authenticated users' gRPC requests may be authorized using the wrong privilege level due to incorrect privilege assignment. This results in the use of an incorrect AAA method list for authorization. The flaw is specific to gRPC requests and does not impact other OpenConfig request types like NETCONF. The vulnerability affects multiple EOS versions from 4.29.0F through 4.36.0.1F. It has a CVSS 3.1 score of 8.0 (AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H), indicating network attack vector, high complexity, high privileges required, no user interaction, scope changed, and high impact on confidentiality, integrity, and availability.

An authenticated user sending gRPC requests to OpenConfig on affected EOS versions may gain incorrect privilege levels, leading to authorization using the wrong AAA method list. This could allow unauthorized access or actions beyond intended permissions, impacting confidentiality, integrity, and availability of the system. Non-gRPC OpenConfig requests such as NETCONF are not affected.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, users should carefully review AAA-based gRPC authorization configurations and consider limiting gRPC access or disabling AAA-based gRPC authorization if feasible. Monitor vendor advisories for updates and apply official patches once released.