Description (CNA)
On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a Captive-Portal-enabled SSID can crash the portal service with a crafted HTTP request. This results in a temporary denial of service until the service automatically restarts. Remote code execution is not possible.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Arista Networks / Wi-Fi Access Points | affected 22.0.0 through 22.0.1F-32; affected 21.3.0 through 21.3.0M-13; affected 1.0.0 before 21.3.0 |
CWE
CWE-191
References
ADP enrichment
No English description supplied.
No references supplied.