by Kastro
Paper/Archive/CVE-2026-102167

CVE-2026-102167

Arista Networks Wi-Fi Access Points — Security Advisory 0197

EPSS 0.2%CVSS 9.0
critical.is priorityof 100
30
CVSS 9.0 (CNA)9.0 / 10 × 3027.0Not in CISA KEV+300.0EPSS percentile 14.1.141 × 202.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network endpoints. An unauthenticated attacker can crash the sensor service or potentially achieve remote code execution. Exploitation requires the attacker to be on the same network segment as the access point's wired uplink.

Affected

ProductAffectedFixed inSource
Wi-Fi Access Points22.0.0 – 22.0.1F-32–CNA
Wi-Fi Access Points21.3.0 – 21.3.0M-13–CNA
Wi-Fi Access Points1.0.0 – < 21.3.021.3.0CNA

Scores by source

Arista (CNA)9.0CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Arista (CNA)7.5CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisoryarista.com/en/support/advisories-notices/security-advisory/24813-security-advisory-0197