Description
Arista C-260 and C-250 access points ship with fleet-wide static cryptographic keys used for firmware image verification and SSLP authentication. An attacker who is able to access these keys would be able to create modified firmware that will pass verification checks. This vulnerability is specific to the C-260 and C-250 models; other access point models enforce digitally signed upgrade images with secure boot and are not affected by this issue.
Published: 2026-11-10
Score: 9.4 Critical
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

Vendor Workaround

nerdctl exec -it wifimanager -- bash [root@wifi-security-server1 /]# su - config [config]$ set config parameter Enter parameter name: upgrade_hmac_fallback_enabled Enter parameter value: 0 Enter configid: 3 (confirm: y) [config]$ set config parameter Enter parameter name: upgrade_hmac_fallback_enabled Enter parameter value: 0 Enter configid: 1 (confirm: y) [root@wifi-security-server1 /]# /etc/init.d/sserverd restart (Workaround: Disable the HMAC-based firmware verification fallback path. For cloud deployments, contact Arista TAC.)

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 10 Nov 2026 20:15:00 +0000

Type Values Removed Values Added
Description Arista C-260 and C-250 access points ship with fleet-wide static cryptographic keys used for firmware image verification and SSLP authentication. An attacker who is able to access these keys would be able to create modified firmware that will pass verification checks. This vulnerability is specific to the C-260 and C-250 models; other access point models enforce digitally signed upgrade images with secure boot and are not affected by this issue.
Title Security Advisory 0227
Weaknesses CWE-798
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 9.4, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: Arista

Published:

Updated: 2026-11-10T20:09:50.306Z

Reserved: 2026-09-28T17:45:17.723Z

Link: CVE-2026-102166

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-11-10T20:17:21.237

Modified: 2026-11-10T20:17:21.237

Link: CVE-2026-102166

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-798

    Use of Hard-coded Credentials