CVE-2023-24512

On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch.

MEDIUM

6.5

CVSS Score

Published: April 25, 2023 at 12:00 AM UTC

Updated: June 17, 2026 at 05:39 AM UTC

111 products affected across 2 vendorsEosCloudeosVeos Lab

Using Terminattr by Arista Networks?

Get instant alerts when new vulnerabilities affect Terminattr - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.5

Exploit prediction

EPSS 0.6%

SSVC

No known exploit

Description

On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. This situation occurs only when the Streaming Telemetry Agent (referred to as the TerminAttr agent) is enabled and gNMI access is configured on the agent. Note: This gNMI over the Streaming Telemetry Agent scenario is mostly commonly used when streaming to a 3rd party system and is not used by default when streaming to CloudVision

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ceos Lab · Arista

95%

All versions

Cloudeos · Arista

95%

All versions

Eos · Arista

95%

4.26.0 ≤ v < 4.26.10m4.27.0 ≤ v < 4.27.9m4.28.0 ≤ v < 4.28.6m4.29.0 ≤ v < 4.29.2f

Affected range stops below 4.26.10m, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.27.9m, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.28.6m, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.29.2f, so it looks safe — our inference, not a vendor statement

arista-32qd (environment) · arista-48ehs (environment) · arista-48lbas (environment) · arista-48lbs (environment) · arista-48s6qd (environment) · arista-7010t-48 (environment) · arista-7020sr-24c2 (environment) · arista-7020sr-32c2 (environment) · arista-7020tr-48 (environment) · arista-7020tra-48 (environment) · arista-7050cx3-32s (environment) · arista-7050cx3m-32s (environment) · arista-7050qx-32s (environment) · arista-7050qx2-32s (environment) · arista-7050sx-128 (environment) · arista-7050sx-64 (environment) · arista-7050sx-72q (environment) · arista-7050sx2-128 (environment) · arista-7050sx2-72q (environment) · arista-7050sx3-48c8 (environment) · arista-7050sx3-48yc (environment) · arista-7050sx3-48yc12 (environment) · arista-7050sx3-48yc8 (environment) · arista-7050sx3-96yc8 (environment) · arista-7050tx-48 (environment) · arista-7050tx-64 (environment) · arista-7050tx-72q (environment) · arista-7050tx2-128 (environment) · arista-7050tx3-48c8 (environment) · arista-7060cx-32s (environment) · arista-7060cx2-32s (environment) · arista-7060dx4-32 (environment) · arista-7060px4-32 (environment) · arista-7060sx2-48yc6 (environment) · arista-7130-16g3s (environment) · arista-7130-48g3s (environment) · arista-7130-96s (environment) · arista-7150s-24 (environment) · arista-7150s-52 (environment) · arista-7150s-64 (environment) · arista-7150sc-24 (environment) · arista-7150sc-64 (environment) · arista-7160-32cq (environment) · arista-7160-48tc6 (environment) · arista-7160-48yc6 (environment) · arista-7170-32c (environment) · arista-7170-32cd (environment) · arista-7170-64c (environment) · arista-7170b-64c (environment) · arista-720df-48y (environment) · arista-720dp-24s (environment) · arista-720dp-48s (environment) · arista-720dt-24s (environment) · arista-720dt-48s (environment) · arista-720xp-24y6 (environment) · arista-720xp-24zy4 (environment) · arista-720xp-48y6 (environment) · arista-720xp-48zc2 (environment) · arista-720xp-96zc2 (environment) · arista-7250qx-64 (environment) · arista-7260cx (environment) · arista-7260cx3 (environment) · arista-7260qx (environment) · arista-7260sx2 (environment) · arista-7280cr2k-60 (environment) · arista-7280cr3-32d4 (environment) · arista-7280cr3-32p4 (environment) · arista-7280cr3-96 (environment) · arista-7280cr3k-32d4 (environment) · arista-7280cr3k-32p4 (environment) · arista-7280cr3k-96 (environment) · arista-7280dr3-24 (environment) · arista-7280dr3k-24 (environment) · arista-7280e (environment) · arista-7280pr3-24 (environment) · arista-7280pr3k-24 (environment) · arista-7280sr3-48yc8 (environment) · arista-7280sr3k-48yc8 (environment) · arista-7300x-32q (environment) · arista-7300x-64s (environment) · arista-7300x-64t (environment) · arista-7300x3-32c (environment) · arista-7300x3-48yc4 (environment) · arista-7320x-32c (environment) · arista-7358x4 (environment) · arista-7368x4 (environment) · arista-7388x5 (environment) · arista-7500r3-24d (environment) · arista-7500r3-24p (environment) · arista-7500r3-36cq (environment) · arista-7500r3k-36cq (environment) · arista-7804r3 (environment) · arista-7808r3 (environment) · arista-7812r3 (environment) · arista-7816r3 (environment) · arista-96lbs (environment) · arista-dcs-7010tx-48 (environment) · arista-dcs-7500-12cq-lc (environment) · arista-dcs-7500e-12cm-lc (environment) · arista-dcs-7500e-36q-lc (environment) · arista-dcs-7500e-48s-lc (environment) · arista-dcs-7500e-6c2-lc (environment) · arista-dcs-7500e-72s-lc (environment) · arista-dcs-7500r-36cq-lc (environment) · arista-dcs-7500r-36q-lc (environment) · arista-dcs-7500r-48s2cq-lc (environment)

Veos Lab · Arista

95%

All versions

Terminattr · Arista Networks

60%

v ≤ 1.19.51.22.0 ≤ v ≤ 1.22.11.24.0 ≤ v ≤ 1.24.31.22.0 1.23.0 1.24.0

32Qd · Aristadevice

80%

All versions

48Ehs · Aristadevice

80%

All versions