CVE-2026-102164
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
On affected Arista access points configured with VXLAN tunnelling and L2-proxy (a specific configuration unique to the VESPA use-case), a wireless client associated to the tunnelled SSID can send a crafted packet, causing the access point to reveal memory contents in network traffic. No write primitive or remote code execution is possible.
Risk Assessment
Exposure of memory contents in network traffic may compromise data confidentiality. The risk affects organizations using Arista access points with VXLAN and L2-proxy configuration.
Recommendation
Apply available Arista access point software updates. Restrict access to tunnelled SSIDs or change the configuration if possible.
Other vulnerabilities in Arista access points
Original NVD description (English source)
On affected Arista access points configured with VXLAN tunnelling and L2-proxy (a specific configuration unique to the VESPA use-case), a wireless client associated to the tunnelled SSID can send a crafted packet, causing the access point to reveal memory contents in network traffic. No write primitive or remote code execution is possible.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS