{"id":"CVE-2026-102165","published":"2026-10-06T20:17:11.800","lastModified":"2026-10-07T13:38:48.657","description":"On affected Arista Wi-Fi access points, an unauthenticated attacker with network access to the capture service can send a crafted packet to cause the service to crash or potentially achieve remote code execution. This exploit requires an uncommonly used non-default streaming mode.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-121"],"vendors":[],"products":[],"references":[{"url":"https://www.arista.com/en/support/advisories-notices/security-advisory/24814-security-advisory-0198","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Arista Wi-Fi access points are vulnerable to a heap-based buffer overflow in their capture service that can be triggered by sending a crafted packet from an unauthenticated network attacker. This flaw can lead to service crashes or potentially allow remote code execution, making it a significant security risk for wireless infrastructure.","exploitability":"Exploitation requires an attacker with network access to the capture service and knowledge of a non-default streaming mode, making it moderately difficult but not highly complex to achieve.","blast_radius":"If exploited, this vulnerability could compromise multiple wireless access points across a network, potentially leading to unauthorized wireless access, data interception, or further network infiltration through the compromised Wi-Fi infrastructure.","remediation":"Disable the capture service or restrict network access to the affected service until a patch is available, as no fixed version is published in the description.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["wireless","rce","buffer-overflow"],"model":"garnet-coder","analyzedAt":"2026-10-15T09:04:57.241Z"}}