CVE-2026-102167CWE-121
CVE-2026-102167
High · published October 7, 2026
What it is
On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network endpoints. An unauthenticated attacker can crash the sensor service or potentially achieve remote code execution. Exploitation requires the attacker to be on the same network segment as the access point's wired uplink.
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- 9.0 · CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
- EPSS
- 0.00232 · 13.3th percentile
- Weakness
- CWE-121 · Stack-based Buffer Overflow
- Published
- 2026-10-07T00:17Z
References (1)
EPSS history
Timeline
08 OCT 03:27Z
EPSS moved — → 0%
epss
06 OCT 19:40Z
Security Advisory 0197
cvelistv5