Summary
Ein Angreifer kann mehrere Schwachstellen in Arista WiFi Access Point ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen und um Informationen offenzulegen.
Product
WiFi Access Point bezeichnet eine Produktfamilie von WLAN Zugriffspunkten von Arista.
Vulnerabilities 7
-
High 8.8
Security Advisory 0193
On affected Arista Wi-Fi access points with captive portal, or application firewall enabled on at least one SSID, a vulnerability in the wireless gateway service could allow an unauthenticated network-adjacent attacker to send a crafted packet that triggers a…
-
High 8.8
Security Advisory 0195
On affected Arista access points with Wireless Intrusion Prevention System (WIPS) active, an unauthenticated attacker within radio frequency (RF) proximity can send a crafted frame to crash the sensor service, disabling WIPS monitoring on the access point, or…
-
High 7.5
Security Advisory 0198
On affected Arista Wi-Fi access points, an unauthenticated attacker with network access to the capture service can send a crafted packet to cause the service to crash or potentially achieve remote code execution. This exploit requires an uncommonly used non-d…
-
High 7.5
Security Advisory 0197
On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network endpoints. An unauthenticated attacker can crash the sensor service or potentially achieve remote code execution. Exploitation requires the…
-
Medium 6.5
Security Advisory 0194
On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a Captive-Portal-enabled SSID can crash the portal service with a crafted HTTP request. This results in a temporary denial of service until the…
-
Medium 6.5
Security Advisory 0194
On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a captive-portal-enabled SSID can crash the portal service with a crafted HTTP request. The service automatically restarts, but a sustained low…
-
Low 3.1
Security Advisory 0196
On affected Arista access points configured with VXLAN tunnelling and L2-proxy (a specific configuration unique to the VESPA use-case), a wireless client associated to the tunnelled SSID can send a crafted packet, causing the access point to reveal memory con…
Revision history
-
#1
Initiale Fassung
References
-
Arista Security Advisory vom 2026-10-06
https://www.arista.com/en/support/advisories-notices/security-advisory/24809-security-advisory-0193
-
Arista Security Advisory vom 2026-10-06
https://www.arista.com/en/support/advisories-notices/security-advisory/24810-security-advisory-0194
-
Arista Security Advisory vom 2026-10-06
https://www.arista.com/en/support/advisories-notices/security-advisory/24811-security-advisory-0195
-
Arista Security Advisory vom 2026-10-06
https://www.arista.com/en/support/advisories-notices/security-advisory/24812-security-advisory-0196
-
Arista Security Advisory vom 2026-10-06
https://www.arista.com/en/support/advisories-notices/security-advisory/24813-security-advisory-0197
-
Arista Security Advisory vom 2026-10-06
https://www.arista.com/en/support/advisories-notices/security-advisory/24814-security-advisory-0198