A stack‑overflow bug in the wireless gateway service of affected Arista Wi‑Fi access points allows an unauthenticated, network‑adjacent attacker to send a crafted packet that triggers the overflow. The immediate consequence is a denial‑of‑service state, as the gateway service automatically restarts after a crash, which also creates a prime condition for repeated attacks. The nature of the stack corruption means that, under favorable circumstances, arbitrary code could also be executed on the device, giving the attacker control over the access point.

Arista Networks Wi‑Fi Access Points running firmware 22.1.1F-61 or later in the 22.x train, or firmware 21.4.0M-12 or later in the 21.x train are vulnerable. Products outside these version ranges are not affected unless they contain identical gateway code.

The vulnerable function is exposed to any traffic that can reach the gateway service, so the likely attack vector is network‑adjacent via an attacker’s own device connected to the wireless network or a rogue access point in range. The CVSS score of 9.4 indicates a critical impact. Though no EPSS score is available, the absence of a KEV listing does not reduce the seriousness; the effectiveness of the flaw depends on user proximity to the victim AP and the ability to inject the crafted packet. A successful exploitation would reset the gateway repeatedly, causing intermittent availability loss, and could lead to full compromise if the overflow allows code execution.