CVE-2026-102168: CWE-191 Integer Underflow (Wrap or Wraparound) in Arista Networks Wi-Fi Access Points
Description
On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a Captive-Portal-enabled SSID can crash the portal service with a crafted HTTP request. This results in a temporary denial of service until the service automatically restarts. Remote code execution is not possible.
CVSS v3.1
Score 6.5medium
Affected software
Arista Networks
Wi-Fi Access Points
pkg:github/arista/wifi-access-pointsRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CWE-191) involves an integer underflow (wrap or wraparound) in Arista Wi-Fi Access Points when Captive Portal is enabled. An unauthenticated attacker connected to the affected SSID can trigger a crafted HTTP request that crashes the portal service, resulting in a temporary denial of service. The service automatically restarts, restoring functionality. No remote code execution or data compromise is possible based on the available information.
Potential Impact
The impact is a temporary denial of service on the Captive Portal service of affected Arista Wi-Fi Access Points. The service crash disrupts connectivity for users relying on the portal until it restarts automatically. There is no confidentiality or integrity impact, and no remote code execution is possible.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, monitor Arista Networks advisories for updates. Until a fix is available, consider disabling Captive Portal if feasible or limiting access to trusted clients to reduce exposure.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Arista
- Date Reserved
- 2026-09-28T17:45:17.723Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ac550db2cdf04f656d8a122
Added to database: 10/06/2026, 19:49:47 UTC
Last enriched: 10/06/2026, 20:19:46 UTC
Last updated: 10/06/2026, 20:49:08 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.