CVE-2026-102167: CWE-121 Stack-based Buffer Overflow in Arista Networks Wi-Fi Access Points

This vulnerability (CWE-121) involves memory corruption due to a stack-based buffer overflow in the wired uplink network endpoints of Arista Wi-Fi Access Points. An attacker without authentication but with network access to the same segment as the wired uplink can exploit this flaw to crash the sensor service or possibly achieve remote code execution. The affected versions include all releases from 1.0.0 up to and including 22.0.1F-32 and 21.3.0M-13. The CVSS 3.1 vector indicates attack complexity is high, no privileges or user interaction required, and impacts confidentiality, integrity, and availability.

Successful exploitation can lead to denial of service by crashing the sensor service or potentially remote code execution, compromising confidentiality, integrity, and availability of the affected device. The attacker must be on the same network segment as the wired uplink, limiting the attack surface to local network access.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit network access to the wired uplink segment and monitor for unusual activity. Avoid exposing the wired uplink network segment to untrusted users.