CVE-2026-102162: CWE-121 Stack-based Buffer Overflow in Arista Networks Wi-Fi Access Points

This vulnerability (CWE-121) exists in the wireless gateway service of Arista Networks Wi-Fi Access Points when captive portal or application firewall features are enabled. An unauthenticated attacker within network adjacency can send specially crafted packets that cause a stack-based buffer overflow. This overflow can lead to denial-of-service conditions or potentially allow arbitrary code execution on the device. The wireless gateway service restarts automatically after crashing, which could enable repeated exploitation attempts. The CVSS v3.1 base score is 8.8, indicating high severity with attack vector as adjacent network, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation can result in denial-of-service by crashing the wireless gateway service or potentially arbitrary code execution on the affected device, compromising confidentiality, integrity, and availability of the device. Because the service restarts automatically, attackers may repeatedly exploit this vulnerability to maintain persistent impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider disabling captive portal or application firewall features if feasible to reduce exposure. Monitor vendor communications for patches or official mitigations.