Arista C-260 and C-250 access points contain a vulnerability due to the use of fleet-wide static cryptographic keys for firmware image verification and SSLP authentication. This allows an attacker with access to these keys to create modified firmware that can bypass verification checks. Other Arista access point models are not affected as they use digitally signed upgrade images with secure boot.