CVE-2026-102167
HighCVSS 7.5Summary
Arista Wi-Fi access points contain a memory corruption vulnerability in the wired uplink network endpoints. An unauthenticated attacker on the same network segment can crash the sensor service or potentially achieve remote code execution.
Risk Assessment
The risk includes service disruption or full compromise of the access point. The attack requires local network access but can lead to serious security breaches.
Recommendation
Upgrade access point firmware to a patched version. Also restrict access to the wired network and segment the network.
Other vulnerabilities in Arista Wi-Fi access points
See all- CVE-2026-102169Medium
On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client can crash the portal service with a crafted HTTP request. The service restarts automatically, but a sustained low-rate attack can cause persistent denial of service. Remote code execution is not possible.
- CVE-2026-102168Medium
On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client can crash the portal service with a crafted HTTP request. This results in temporary denial of service until the service restarts automatically. Remote code execution is not possible.
- CVE-2026-102165High
Arista Wi-Fi access points contain a vulnerability in the capture service. An unauthenticated attacker with network access can send a crafted packet to crash the service or potentially achieve remote code execution. This requires an uncommon non-default streaming mode.
- CVE-2026-102162High
Arista Wi-Fi access points with captive portal or application firewall enabled on at least one SSID contain a vulnerability in the wireless gateway service. An unauthenticated network-adjacent attacker can send a crafted packet that triggers a stack overflow, resulting in a denial-of-service condition or potentially execute arbitrary code on the device.
Original NVD description (English source)
On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network endpoints. An unauthenticated attacker can crash the sensor service or potentially achieve remote code execution. Exploitation requires the attacker to be on the same network segment as the access point's wired uplink.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS