Description (CNA)
On affected Arista access points configured with VXLAN tunnelling and L2-proxy (a specific configuration unique to the VESPA use-case), a wireless client associated to the tunnelled SSID can send a crafted packet, causing the access point to reveal memory contents in network traffic. No write primitive or remote code execution is possible.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Arista Networks / Wi-Fi Access Points | affected 22.0.0 through 22.0.1F-32; affected 21.3.0 through 21.3.0M-13; affected 1.0.0 before 21.3.0 |
CWE
CWE-125
References
ADP enrichment
No English description supplied.
No references supplied.