CVE-2026-102162

Summary

This vulnerability allows an unauthenticated attacker to trigger a stack overflow in the wireless gateway service, leading to a denial-of-service condition or potentially executing arbitrary code on the device.

Exploitability

Exploitation requires network adjacency to the affected Arista Wi-Fi access point and enabling of the captive portal or application firewall on at least one SSID. The attacker must send a crafted packet to exploit the vulnerability.

Blast radius

If exploited, the device will experience a denial-of-service condition, and the wireless gateway service will be repeatedly restarted, impacting network availability and potentially allowing arbitrary code execution.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the captive portal and application firewall features on all affected SSIDs, or upgrade to the latest firmware version that addresses this vulnerability.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.