CVE-2026-102164 — Security Advisory 0196
On affected Arista access points configured with VXLAN tunnelling and L2-proxy (a specific configuration unique to the VESPA use-case), a wireless client associated to the tunne…
Published: 2026-10-06 · CVSS: 2.3 · CVSS 4.0
On affected Arista access points configured with VXLAN tunnelling and L2-proxy (a specific configuration unique to the VESPA use-case), a wireless client associated to the tunnelled SSID can send a crafted packet, causing the access point to reveal memory contents in network traffic. No write primitive or remote code execution is possible.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7