This vulnerability is a classic buffer‑overflow flaw that allows an attacker within radio‑frequency proximity to send a specially crafted frame to the Wireless Intrusion Prevention System (WIPS) sensor service, causing the service to crash or, in worst‑case, execute arbitrary code on the access point. The flaw requires no wireless association or authentication, meaning any device capable of transmitting the packet over the air can exploit the weak boundary validation—in short, the attack requires only physical proximity and the ability to craft the frame.

Arista Networks Wi‑Fi Access Points that have the WIPS feature enabled are affected. The problem exists in firmware 22.x releases prior to 22.1.1F‑61 and in firmware 21.x releases prior to 21.4.0M‑12. All other Arista Wi‑Fi APs on the 22.x or 21.x train with newer firmware versions are not impacted.

The CVSS base score is 8.7, indicating a high likelihood of successful exploitation if the conditions are met. EPSS data is not available, so the current probability of exploitation remains uncertain; however, the lack of authentication and the requirement of only radio‑frequency proximity raise the practical risk for environments where devices are not strictly isolated. The vulnerability is not listed in the CISA KEV catalog, which suggests no publicly known active exploits as of the last update. Attackers would need to position a device within RF range of the access point and transmit the malicious frame; no additional network privilege or user interaction is required.