# CVE-2026-102167: Arista Wi-Fi Access Point memory corruption in wired uplink

Source: https://junglewise.ai/threats/cve-2026-102167-on-affected-arista-wi-fi-access-points-a-memory-corruption  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-06. Updated: 2026-10-06  
License: CC BY 4.0 with a link back

CVE-2026-102167 · Severity: high · CVSS 7.5 · Published 2026-10-06

Arista Wi-Fi access points contain a memory corruption vulnerability in their wired network connections that allows an unauthenticated attacker on the same network segment to crash the device's sensor service or execute arbitrary code. This could enable an attacker with network access to the access point's wired link to compromise or disable the device entirely. The vulnerability does not require authentication or user interaction, making it particularly dangerous for access points exposed to untrusted network segments.

Technologies: [Arista Wi-Fi Access Point](https://junglewise.ai/threats/technologies/wi-fi-access-point). Vendors: [Arista](https://junglewise.ai/threats/vendors/arista).

## Quick answers

**Is CVE-2026-102167 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-102167 being exploited in the wild.

**How severe is CVE-2026-102167?** High severity, with a CVSS score of 7.5, published 6 October 2026.

**Which products and versions are affected?** Arista Wi-Fi Access Point 22.0.1F-32 and earlier in 22.x train; 21.3.0M-13 and earlier in 21.x train; all prior releases.

**Is there a fix for CVE-2026-102167?** Yes: fixed in 22.1.1F-61 and later in 22.x train; 21.4.0M-12 and later in 21.x train. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-102167 attacked?** It is attacked from the adjacent network.

**Am I affected by CVE-2026-102167?** Check whether you run Arista Wi-Fi Access Point at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in 22.1.1F-61 and later in 22.x train; 21.4.0M-12 and later in 21.x train

## Technical details

A stack-based buffer overflow (CWE-121) exists in the access point's wired uplink network endpoint processing. An unauthenticated attacker adjacent to the wired uplink can send specially crafted network packets to trigger memory corruption, leading to denial of service (sensor service crash) or remote code execution. Exploitation requires the attacker to be on the same network segment as the wired uplink interface; a fix is available in patched releases.

## Affected products

- Arista Wi-Fi Access Point 22.0.1F-32 and earlier in 22.x train; 21.3.0M-13 and earlier in 21.x train; all prior releases

## Timeline

- 2026-10-06: disclosed

## References

- [https://www.arista.com/en/support/advisories-notices/security-advisory/24813-security-advisory-0197](https://www.arista.com/en/support/advisories-notices/security-advisory/24813-security-advisory-0197)

## Related threats

- [Arista Wi-Fi Access Point denial of service in Captive Portal](https://junglewise.ai/threats/cve-2026-102169-on-affected-arista-wi-fi-access-points-with-captive-portal)
- [Arista Wi-Fi Access Point denial of service in Captive Portal](https://junglewise.ai/threats/cve-2026-102168-on-affected-arista-wi-fi-access-points-with-captive-portal)
- [Arista Wi-Fi Access Point stack-based buffer overflow in capture service](https://junglewise.ai/threats/cve-2026-102165-on-affected-arista-wi-fi-access-points-an-unauthenticated)
- [Arista Wi-Fi Access Point WIPS out-of-bounds write](https://junglewise.ai/threats/cve-2026-102163-on-affected-arista-access-points-with-wireless-intrusion)
- [Arista Wi-Fi Access Point stack overflow in wireless gateway service](https://junglewise.ai/threats/cve-2026-102162-on-affected-arista-wi-fi-access-points-with-captive-portal-or)