A local network attacker is a person or device that already has a foothold on the same LAN segment as the target. This could mean access through Wi-Fi, Ethernet, a guest network, a compromised internal host, or a plugged-in rogue device. Compared with an internet-based attacker, a local attacker is often closer to the target and may reach services that are blocked from outside the network.
This matters because many devices trust internal traffic too much. Local attackers can probe management interfaces, exploit weak authentication, intercept unencrypted traffic, or abuse protocols designed for convenience inside a trusted network. In real attacks, that foothold can be used to steal credentials, change device settings, pivot to other systems, or bypass perimeter defenses. Good defenses include network segmentation, strong authentication on admin services, encrypted management channels, and limiting which LAN hosts can reach sensitive interfaces.