Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.0
CVE-2026-102167: Arista Wi‑Fi access points can be crashed or hijacked
CVE-2026-102167 · published 5 days ago
Summary
Arista Wi‑Fi access points have a flaw in their wired network connection that lets anyone on the same local network cause the device to stop working or potentially run their own code. This could disrupt wireless service or expose the network to further attacks. Apply the latest firmware update from Arista and restrict access to the wired ports to trusted devices only.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| arista networks | wi-fi access points | <= 22.0.1F-32 |
Original advisory text
Security Advisory 0197
On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network endpoints. An unauthenticated attacker can crash the sensor service or potentially achieve remote code execution. Exploitation requires the attacker to be on the same network segment as the access point's wired uplink.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
9.0
Critical
Type
CWE-121Stack-based Buffer Overflow
Timeline
Published6 Oct 2026
Updated7 Oct 2026
First seen6 Oct 2026
Track software like this
Free during beta