CVE-2026-102165

Summary

Arista Wi-Fi access points are vulnerable to a heap-based buffer overflow in their capture service that can be triggered by sending a crafted packet from an unauthenticated network attacker. This flaw can lead to service crashes or potentially allow remote code execution, making it a significant security risk for wireless infrastructure.

Exploitability

Exploitation requires an attacker with network access to the capture service and knowledge of a non-default streaming mode, making it moderately difficult but not highly complex to achieve.

Blast radius

If exploited, this vulnerability could compromise multiple wireless access points across a network, potentially leading to unauthorized wireless access, data interception, or further network infiltration through the compromised Wi-Fi infrastructure.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the capture service or restrict network access to the affected service until a patch is available, as no fixed version is published in the description.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.