Description
On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a captive-portal-enabled SSID can crash the portal service with a crafted HTTP request. The service automatically restarts, but a sustained low-rate attack can cause a persistent denial of service of the captive portal. Remote code execution is not possible.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Arista Networks Wi-Fi Access Points
Default version status: unaffected
22.0.0 to ≤ 22.0.1F-32affected21.3.0 to ≤ 21.3.0M-13affected1.0.0 to < 21.3.0affected