Description
On affected Arista access points configured with VXLAN tunnelling and L2-proxy (a specific configuration unique to the VESPA use-case), a wireless client associated to the tunnelled SSID can send a crafted packet, causing the access point to reveal memory contents in network traffic. No write primitive or remote code execution is possible.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Arista Networks Wi-Fi Access Points
Default version status: unaffected
22.0.0 to ≤ 22.0.1F-32affected21.3.0 to ≤ 21.3.0M-13affected1.0.0 to < 21.3.0affected