Description (CNA)
On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a captive-portal-enabled SSID can crash the portal service with a crafted HTTP request. The service automatically restarts, but a sustained low-rate attack can cause a persistent denial of service of the captive portal. Remote code execution is not possible.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Arista Networks / Wi-Fi Access Points | affected 22.0.0 through 22.0.1F-32; affected 21.3.0 through 21.3.0M-13; affected 1.0.0 before 21.3.0 |
CWE
CWE-476
References
ADP enrichment
No English description supplied.
No references supplied.