{"id":"CVE-2026-102167","published":"2026-10-06T20:17:11.937","lastModified":"2026-10-07T13:38:48.657","description":"On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network endpoints. An unauthenticated attacker can crash the sensor service or potentially achieve remote code execution. Exploitation requires the attacker to be on the same network segment as the access point's wired uplink.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-121"],"vendors":[],"products":[],"references":[{"url":"https://www.arista.com/en/support/advisories-notices/security-advisory/24813-security-advisory-0197","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A memory corruption vulnerability in Arista Wi-Fi access points allows unauthenticated attackers on the same network segment to crash the sensor service or potentially achieve remote code execution. This represents a significant security risk as it could lead to complete device compromise and potential network infiltration.","exploitability":"Exploitation requires an attacker to be on the same network segment as the access point's wired uplink, making it moderately difficult but achievable in environments where attackers can establish a presence on the local network.","blast_radius":"If exploited, this vulnerability could affect multiple Wi-Fi access points across the network, potentially allowing attackers to gain persistent access to wireless infrastructure and compromise wireless network communications.","remediation":"Upgrade to Arista OS 2.590 or later to remediate this memory corruption vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["wireless","memory-corruption","rce"],"model":"garnet-coder","analyzedAt":"2026-10-15T09:04:51.408Z"}}