CVE-2026-102164 | BDVDB-2026-383545 Detail
Arista NetworksWi-Fi Access Points
Description#
On affected Arista access points configured with VXLAN tunnelling and L2-proxy (a specific configuration unique to the VESPA use-case), a wireless client associated to the tunnelled SSID can send a crafted packet, causing the access point to reveal memory contents in network traffic. No write primitive or remote code execution is possible.
Impact#
CAPEC-540 Overread Buffers
Weaknesses#
- CWE-125 Out-of-bounds Read
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.