← Back to search

CVE-2026-102167

7.5 HIGH

Published 2026-10-06 · Updated 2026-10-07

AI risk analysis

Summary
A memory corruption vulnerability in Arista Wi-Fi access points allows unauthenticated attackers on the same network segment to crash the sensor service or potentially achieve remote code execution. This represents a significant security risk as it could lead to complete device compromise and potential network infiltration.
Exploitability
Exploitation requires an attacker to be on the same network segment as the access point's wired uplink, making it moderately difficult but achievable in environments where attackers can establish a presence on the local network.
Blast radius
If exploited, this vulnerability could affect multiple Wi-Fi access points across the network, potentially allowing attackers to gain persistent access to wireless infrastructure and compromise wireless network communications.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to Arista OS 2.590 or later to remediate this memory corruption vulnerability.
wirelessmemory-corruptionrce

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network endpoints. An unauthenticated attacker can crash the sensor service or potentially achieve remote code execution. Exploitation requires the attacker to be on the same network segment as the access point's wired uplink.

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-121

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.