CyberRota Analysis
AI-GeneratedArista access points configured with VXLAN tunneling and L2-proxy are vulnerable to information disclosure, allowing a wireless client connected to the tunnelled SSID to send a crafted packet that exposes sensitive memory contents in network traffic. While the severity is low and does not allow for remote code execution or write primitives, organizations using this specific configuration should prioritize remediation to protect against potential data leakage. Network administrators managing these access points should assess their configurations and apply necessary mitigations.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
On affected Arista access points configured with VXLAN tunnelling and L2-proxy (a specific configuration unique to the VESPA use-case), a wireless client associated to the tunnelled SSID can send a crafted packet, causing the access point to reveal memory contents in network traffic. No write primitive or remote code execution is possible.