The vulnerability in Arista Wi‑Fi Access Points arises when VXLAN tunneling with L2‑proxy is enabled. A client that is associated with the tunnelled SSID can send a specially crafted packet that causes the access point to leak memory contents in the network traffic. The flaw is an out‑of‑bounds read (CWE‑125) and does not provide a write primitive or remote code execution, so confidentiality is at risk but integrity and availability remain unaffected.

Systems affected are Arista Networks Wi‑Fi Access Points running firmware prior to 22.1.1F‑61 in the 22.x train or prior to 21.4.0M‑12 in the 21.x train. Only configurations that use VXLAN tunnelling with L2‑proxy are vulnerable

The CVSS score of 2.3 indicates low severity. EPSS data is not available and the vulnerability is not listed in CISA KEV. The likely attack vector requires a wireless client connected to the tunnelled SSID, so physical proximity or network connectivity is required. Because the flaw only reads memory, exploitation relies on observing leaked data, making it a localized disclosure rather than a system compromise.