by Kastro
Paper/Archive/CVE-2026-102162

CVE-2026-102162

Arista Networks Wi-Fi Access Points — Security Advisory 0193

EPSS 0.2%CVSS 9.4
critical.is priorityof 100
31
CVSS 9.4 (CNA)9.4 / 10 × 3028.2Not in CISA KEV+300.0EPSS percentile 15.8.158 × 203.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

On affected Arista Wi-Fi access points with captive portal, or application firewall enabled on at least one SSID, a vulnerability in the wireless gateway service could allow an unauthenticated network-adjacent attacker to send a crafted packet that triggers a stack overflow, resulting in a denial-of-service condition or potentially execute arbitrary code on the device. The wireless gateway service is automatically restarted after a crash, allowing repeated exploitation attempts.

Affected

ProductAffectedFixed inSource
Wi-Fi Access Points22.0.0 – 22.0.1F-32–CNA
Wi-Fi Access Points21.3.0 – 21.3.0M-13–CNA
Wi-Fi Access Points1.0.0 – < 21.3.021.3.0CNA

Scores by source

Arista (CNA)9.4CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Arista (CNA)8.8CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisoryarista.com/en/support/advisories-notices/security-advisory/24809-security-advisory-0193