CVE-2026-102167

Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-07

Assigner: Arista Networks, Inc.

Description

On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network endpoints. An unauthenticated attacker can crash the sensor service or potentially achieve remote code execution. Exploitation requires the attacker to be on the same network segment as the access point's wired uplink.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-07

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102167

EUVD

EUVD-2026-93967

Affected Vendors & Products

Vendor	Product	Version / Range
Arista	Networks	Wi-Fi Access Points 22.0.0
Arista	Networks	Wi-Fi Access Points 21.3.0
Arista	Networks	Wi-Fi Access Points 1.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This vulnerability is a memory corruption issue in Arista Wi-Fi access points affecting the wired uplink network endpoints. An unauthenticated attacker on the same network segment can exploit it to crash the sensor service or potentially execute remote code.

Detection Guidance

Detection requires monitoring for crashes in the sensor service or unusual network traffic patterns on the wired uplink of Arista Wi-Fi access points. Check for service logs indicating memory corruption or unexpected terminations. Use network monitoring tools to inspect traffic from the same network segment as the access point's wired uplink for signs of exploitation attempts.

Impact Analysis

An attacker could disrupt network services by crashing the sensor service or gain control of the access point to execute malicious code, potentially leading to unauthorized access or data breaches.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate GDPR's data protection requirements or HIPAA's security rules, potentially resulting in legal penalties or compliance failures.

Mitigation Strategies

Isolate affected Arista Wi-Fi access points to a dedicated network segment to limit exposure. Monitor network traffic for unusual activity targeting the access point's wired uplink. Apply vendor patches or updates as soon as they become available from Arista Networks.

Hi! I’m here to help you understand CVE-2026-102167. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70