CVE-2026-102163

HighCVSS 8.8

Published: 06/10/2026(UTC)Updated: 07/10/2026(UTC)Translated: 07/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

22th percentile - higher than 22% of all known CVEs

Summary

Arista access points with WIPS active contain a vulnerability that allows an unauthenticated attacker within RF proximity to send a crafted frame to crash the sensor service, disabling WIPS monitoring, or potentially achieve remote code execution. No wireless association or authentication is required.

Risk Assessment

The risk includes disabling WIPS monitoring, which could lead to undetected attacks on the wireless network. It is also possible to take control of the access point.

Recommendation

Upgrade firmware to a patched version. Also monitor radio signals and use anomaly detection mechanisms.

Other vulnerabilities in Arista access points

CVE-2026-102164Low
On affected Arista access points configured with VXLAN tunnelling and L2-proxy (a specific configuration unique to the VESPA use-case), a wireless client associated to the tunnelled SSID can send a crafted packet, causing the access point to reveal memory contents in network traffic. No write primitive or remote code execution is possible.

Original NVD description (English source)

On affected Arista access points with Wireless Intrusion Prevention System (WIPS) active, an unauthenticated attacker within radio frequency (RF) proximity can send a crafted frame to crash the sensor service, disabling WIPS monitoring on the access point, or potentially achieve remote code execution. No wireless association or authentication is required.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS