{"id":"CVE-2026-102162","published":"2026-10-06T20:17:11.377","lastModified":"2026-10-07T13:38:48.657","description":"On affected Arista Wi-Fi access points with captive portal, or application firewall enabled on at least one SSID, a vulnerability in the wireless gateway service could allow an unauthenticated network-adjacent attacker to send a crafted packet that triggers a stack overflow, resulting in a denial-of-service condition or potentially execute arbitrary code on the device. The wireless gateway service is automatically restarted after a crash, allowing repeated exploitation attempts.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-121"],"vendors":[],"products":[],"references":[{"url":"https://www.arista.com/en/support/advisories-notices/security-advisory/24809-security-advisory-0193","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows an unauthenticated attacker to trigger a stack overflow in the wireless gateway service, leading to a denial-of-service condition or potentially executing arbitrary code on the device.","exploitability":"Exploitation requires network adjacency to the affected Arista Wi-Fi access point and enabling of the captive portal or application firewall on at least one SSID. The attacker must send a crafted packet to exploit the vulnerability.","blast_radius":"If exploited, the device will experience a denial-of-service condition, and the wireless gateway service will be repeatedly restarted, impacting network availability and potentially allowing arbitrary code execution.","remediation":"Disable the captive portal and application firewall features on all affected SSIDs, or upgrade to the latest firmware version that addresses this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["dos","arbitrary-code-execution","wireless","stack-overflow"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-08T08:41:42.346Z"}}