CVE-2026-102163CWE-787
CVE-2026-102163
High · published October 7, 2026
What it is
On affected Arista access points with Wireless Intrusion Prevention System (WIPS) active, an unauthenticated attacker within radio frequency (RF) proximity can send a crafted frame to crash the sensor service, disabling WIPS monitoring on the access point, or potentially achieve remote code execution. No wireless association or authentication is required.
The record
Technical detail
- CVSS v3.1
- 8.8 · HIGH
- Vector
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- 8.7 · CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
- EPSS
- 0.00309 · 22.5th percentile
- Weakness
- CWE-787 · Out-of-bounds Write
- Published
- 2026-10-07T00:17Z
References (1)
EPSS history
Timeline
08 OCT 03:27Z
EPSS moved — → 0%
epss
06 OCT 19:40Z
Security Advisory 0195
cvelistv5