Description (CNA)
On affected Arista Wi-Fi access points with captive portal, or application firewall enabled on at least one SSID, a vulnerability in the wireless gateway service could allow an unauthenticated network-adjacent attacker to send a crafted packet that triggers a stack overflow, resulting in a denial-of-service condition or potentially execute arbitrary code on the device. The wireless gateway service is automatically restarted after a crash, allowing repeated exploitation attempts.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Arista Networks / Wi-Fi Access Points | affected 22.0.0 through 22.0.1F-32; affected 21.3.0 through 21.3.0M-13; affected 1.0.0 before 21.3.0 |
CWE
CWE-121
References
ADP enrichment
No English description supplied.
No references supplied.