Description
On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a Captive-Portal-enabled SSID can crash the portal service with a crafted HTTP request. This results in a temporary denial of service until the service automatically restarts. Remote code execution is not possible.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Arista Networks Wi-Fi Access Points
Default version status: unaffected
22.0.0 to ≤ 22.0.1F-32affected21.3.0 to ≤ 21.3.0M-13affected1.0.0 to < 21.3.0affected