On affected platforms running Arista EOS with gRPC Network Management Interface (gNMI) enabled, a specially crafted request could allow a malicious authenticated client with gRPC Network Management Interface (gNMI) access to execute arbitrary code with root privileges on the switch.
| Vendor | Product | Versions |
|---|---|---|
| arista | eos | 4.29.0F, 4.30.0F, 4.31.0F, 4.32.0F, 4.33.0F, 4.34.0F, 4.35.0F, 4.36.0F |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| arista | eos | cert_advisory | 90% |
Loading…
