CVE-2026-102162

Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-07

Assigner: Arista Networks, Inc.

Description

On affected Arista Wi-Fi access points with captive portal, or application firewall enabled on at least one SSID, a vulnerability in the wireless gateway service could allow an unauthenticated network-adjacent attacker to send a crafted packet that triggers a stack overflow, resulting in a denial-of-service condition or potentially execute arbitrary code on the device. The wireless gateway service is automatically restarted after a crash, allowing repeated exploitation attempts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-07

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102162

EUVD

EUVD-2026-93962

Affected Vendors & Products

Vendor	Product	Version / Range
Arista	Networks	Wi-Fi Access Points 22.0.0
Arista	Networks	Wi-Fi Access Points 21.3.0
Arista	Networks	Wi-Fi Access Points 1.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This vulnerability affects Arista Wi-Fi access points with captive portal or application firewall enabled on at least one SSID. An unauthenticated attacker within the network can send a crafted packet to trigger a stack overflow in the wireless gateway service, causing a denial-of-service or potential arbitrary code execution. The service restarts automatically after a crash, enabling repeated attacks.

Detection Guidance

Detection requires monitoring for crashes in the wireless gateway service on Arista Wi-Fi access points with captive portal or application firewall enabled. Check system logs for repeated restarts of the service. Use network traffic analysis to identify crafted packets targeting the wireless gateway. No specific commands are provided in the context.

Impact Analysis

If exploited, this vulnerability could disrupt Wi-Fi network operations by crashing access points, leading to downtime. In severe cases, it may allow attackers to execute arbitrary code, potentially gaining control over the device and accessing sensitive network traffic or data.

Compliance Impact

This vulnerability could impact compliance with GDPR and HIPAA by enabling unauthorized access to network resources, potentially leading to data breaches or unauthorized data exposure. A denial-of-service or arbitrary code execution could disrupt critical systems handling sensitive data, violating confidentiality and availability requirements under these regulations.

Mitigation Strategies

Disable captive portal or application firewall on affected SSIDs if not required. Apply vendor patches or updates for the wireless gateway service. Monitor device logs for repeated crashes or exploitation attempts.

Hi! I’m here to help you understand CVE-2026-102162. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70