# CVE-2025-20140 ## Summary - **CVE ID:** CVE-2025-20140 - **Severity:** HIGH - **CVSS Score:** 7.4 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) - **CWE:** CWE-789 - **Published:** May 7, 2025 - **Last Modified:** Mar 12, 2026 ## Description A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, adjacent wireless attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper memory management. An attacker could exploit this vulnerability by sending a series of IPv6 network requests from an associated wireless IPv6 client to an affected device. To associate a client to a device, an attacker may first need to authenticate to the network, or associate freely in the case of a configured open network. A successful exploit could allow the attacker to cause the wncd process to consume available memory and eventually cause the device to stop responding, resulting in a DoS condition. ## Affected Products - Cisco — Cisco IOS XE Software (16.4.1) - Cisco — Cisco IOS XE Software (16.4.2) - Cisco — Cisco IOS XE Software (16.4.3) - Cisco — Cisco IOS XE Software (16.5.1) - Cisco — Cisco IOS XE Software (16.5.1a) - Cisco — Cisco IOS XE Software (16.5.1b) - Cisco — Cisco IOS XE Software (16.5.2) - Cisco — Cisco IOS XE Software (16.5.3) - Cisco — Cisco IOS XE Software (16.6.1) - Cisco — Cisco IOS XE Software (16.6.2) - Cisco — Cisco IOS XE Software (16.6.3) - Cisco — Cisco IOS XE Software (16.6.4) - Cisco — Cisco IOS XE Software (16.6.5) - Cisco — Cisco IOS XE Software (16.6.4a) - Cisco — Cisco IOS XE Software (16.6.5a) - Cisco — Cisco IOS XE Software (16.6.6) - Cisco — Cisco IOS XE Software (16.6.7) - Cisco — Cisco IOS XE Software (16.6.8) - Cisco — Cisco IOS XE Software (16.6.9) - Cisco — Cisco IOS XE Software (16.6.10) - Cisco — Cisco IOS XE Software (16.7.1) - Cisco — Cisco IOS XE Software (16.7.1a) - Cisco — Cisco IOS XE Software (16.7.1b) - Cisco — Cisco IOS XE Software (16.7.2) - Cisco — Cisco IOS XE Software (16.7.3) - Cisco — Cisco IOS XE Software (16.7.4) - Cisco — Cisco IOS XE Software (16.8.1) - Cisco — Cisco IOS XE Software (16.8.1a) - Cisco — Cisco IOS XE Software (16.8.1b) - Cisco — Cisco IOS XE Software (16.8.1s) - Cisco — Cisco IOS XE Software (16.8.1c) - Cisco — Cisco IOS XE Software (16.8.1d) - Cisco — Cisco IOS XE Software (16.8.2) - Cisco — Cisco IOS XE Software (16.8.1e) - Cisco — Cisco IOS XE Software (16.8.3) - Cisco — Cisco IOS XE Software (16.9.1) - Cisco — Cisco IOS XE Software (16.9.2) - Cisco — Cisco IOS XE Software (16.9.1a) - Cisco — Cisco IOS XE Software (16.9.1b) - Cisco — Cisco IOS XE Software (16.9.1s) - Cisco — Cisco IOS XE Software (16.9.3) - Cisco — Cisco IOS XE Software (16.9.4) - Cisco — Cisco IOS XE Software (16.9.3a) - Cisco — Cisco IOS XE Software (16.9.5) - Cisco — Cisco IOS XE Software (16.9.5f) - Cisco — Cisco IOS XE Software (16.9.6) - Cisco — Cisco IOS XE Software (16.9.7) - Cisco — Cisco IOS XE Software (16.9.8) - Cisco — Cisco IOS XE Software (16.10.1) - Cisco — Cisco IOS XE Software (16.10.1a) - Cisco — Cisco IOS XE Software (16.10.1b) - Cisco — Cisco IOS XE Software (16.10.1s) - Cisco — Cisco IOS XE Software (16.10.1c) - Cisco — Cisco IOS XE Software (16.10.1e) - Cisco — Cisco IOS XE Software (16.10.1d) - Cisco — Cisco IOS XE Software (16.10.2) - Cisco — Cisco IOS XE Software (16.10.1f) - Cisco — Cisco IOS XE Software (16.10.1g) - Cisco — Cisco IOS XE Software (16.10.3) - Cisco — Cisco IOS XE Software (16.11.1) - Cisco — Cisco IOS XE Software (16.11.1a) - Cisco — Cisco IOS XE Software (16.11.1b) - Cisco — Cisco IOS XE Software (16.11.2) - Cisco — Cisco IOS XE Software (16.11.1s) - Cisco — Cisco IOS XE Software (16.12.1) - Cisco — Cisco IOS XE Software (16.12.1s) - Cisco — Cisco IOS XE Software (16.12.1a) - Cisco — Cisco IOS XE Software (16.12.1c) - Cisco — Cisco IOS XE Software (16.12.1w) - Cisco — Cisco IOS XE Software (16.12.2) - Cisco — Cisco IOS XE Software (16.12.1y) - Cisco — Cisco IOS XE Software (16.12.2a) - Cisco — Cisco IOS XE Software (16.12.3) - Cisco — Cisco IOS XE Software (16.12.8) - Cisco — Cisco IOS XE Software (16.12.2s) - Cisco — Cisco IOS XE Software (16.12.1x) - Cisco — Cisco IOS XE Software (16.12.1t) - Cisco — Cisco IOS XE Software (16.12.4) - Cisco — Cisco IOS XE Software (16.12.3s) - Cisco — Cisco IOS XE Software (16.12.3a) - Cisco — Cisco IOS XE Software (16.12.4a) - Cisco — Cisco IOS XE Software (16.12.5) - Cisco — Cisco IOS XE Software (16.12.6) - Cisco — Cisco IOS XE Software (16.12.1z1) - Cisco — Cisco IOS XE Software (16.12.5a) - Cisco — Cisco IOS XE Software (16.12.5b) - Cisco — Cisco IOS XE Software (16.12.1z2) - Cisco — Cisco IOS XE Software (16.12.6a) - Cisco — Cisco IOS XE Software (16.12.7) - Cisco — Cisco IOS XE Software (16.12.9) - Cisco — Cisco IOS XE Software (16.12.10) - Cisco — Cisco IOS XE Software (16.12.10a) - Cisco — Cisco IOS XE Software (16.12.11) - Cisco — Cisco IOS XE Software (16.12.12) - Cisco — Cisco IOS XE Software (17.1.1) - Cisco — Cisco IOS XE Software (17.1.1a) - Cisco — Cisco IOS XE Software (17.1.1s) - Cisco — Cisco IOS XE Software (17.1.1t) - Cisco — Cisco IOS XE Software (17.1.3) - Cisco — Cisco IOS XE Software (17.2.1) - Cisco — Cisco IOS XE Software (17.2.1r) - Cisco — Cisco IOS XE Software (17.2.1a) - Cisco — Cisco IOS XE Software (17.2.1v) - Cisco — Cisco IOS XE Software (17.2.2) - Cisco — Cisco IOS XE Software (17.2.3) - Cisco — Cisco IOS XE Software (17.3.1) - Cisco — Cisco IOS XE Software (17.3.2) - Cisco — Cisco IOS XE Software (17.3.3) - Cisco — Cisco IOS XE Software (17.3.1a) - Cisco — Cisco IOS XE Software (17.3.1w) - Cisco — Cisco IOS XE Software (17.3.2a) - Cisco — Cisco IOS XE Software (17.3.1x) - Cisco — Cisco IOS XE Software (17.3.1z) - Cisco — Cisco IOS XE Software (17.3.4) - Cisco — Cisco IOS XE Software (17.3.5) - Cisco — Cisco IOS XE Software (17.3.4a) - Cisco — Cisco IOS XE Software (17.3.6) - Cisco — Cisco IOS XE Software (17.3.4b) - Cisco — Cisco IOS XE Software (17.3.4c) - Cisco — Cisco IOS XE Software (17.3.5a) - Cisco — Cisco IOS XE Software (17.3.5b) - Cisco — Cisco IOS XE Software (17.3.7) - Cisco — Cisco IOS XE Software (17.3.8) - Cisco — Cisco IOS XE Software (17.3.8a) - Cisco — Cisco IOS XE Software (17.4.1) - Cisco — Cisco IOS XE Software (17.4.2) - Cisco — Cisco IOS XE Software (17.4.1a) - Cisco — Cisco IOS XE Software (17.4.1b) - Cisco — Cisco IOS XE Software (17.4.2a) - Cisco — Cisco IOS XE Software (17.5.1) - Cisco — Cisco IOS XE Software (17.5.1a) - Cisco — Cisco IOS XE Software (17.6.1) - Cisco — Cisco IOS XE Software (17.6.2) - Cisco — Cisco IOS XE Software (17.6.1w) - Cisco — Cisco IOS XE Software (17.6.1a) - Cisco — Cisco IOS XE Software (17.6.1x) - Cisco — Cisco IOS XE Software (17.6.3) - Cisco — Cisco IOS XE Software (17.6.1y) - Cisco — Cisco IOS XE Software (17.6.1z) - Cisco — Cisco IOS XE Software (17.6.3a) - Cisco — Cisco IOS XE Software (17.6.4) - Cisco — Cisco IOS XE Software (17.6.1z1) - Cisco — Cisco IOS XE Software (17.6.5) - Cisco — Cisco IOS XE Software (17.6.6) - Cisco — Cisco IOS XE Software (17.6.6a) - Cisco — Cisco IOS XE Software (17.6.5a) - Cisco — Cisco IOS XE Software (17.6.7) - Cisco — Cisco IOS XE Software (17.6.8) - Cisco — Cisco IOS XE Software (17.6.8a) - Cisco — Cisco IOS XE Software (17.7.1) - Cisco — Cisco IOS XE Software (17.7.1a) - Cisco — Cisco IOS XE Software (17.7.1b) - Cisco — Cisco IOS XE Software (17.7.2) - Cisco — Cisco IOS XE Software (17.10.1) - Cisco — Cisco IOS XE Software (17.10.1a) - Cisco — Cisco IOS XE Software (17.10.1b) - Cisco — Cisco IOS XE Software (17.8.1) - Cisco — Cisco IOS XE Software (17.8.1a) - Cisco — Cisco IOS XE Software (17.9.1) - Cisco — Cisco IOS XE Software (17.9.1w) - Cisco — Cisco IOS XE Software (17.9.2) - Cisco — Cisco IOS XE Software (17.9.1a) - Cisco — Cisco IOS XE Software (17.9.1x) - Cisco — Cisco IOS XE Software (17.9.1y) - Cisco — Cisco IOS XE Software (17.9.3) - Cisco — Cisco IOS XE Software (17.9.2a) - Cisco — Cisco IOS XE Software (17.9.1x1) - Cisco — Cisco IOS XE Software (17.9.3a) - Cisco — Cisco IOS XE Software (17.9.4) - Cisco — Cisco IOS XE Software (17.9.1y1) - Cisco — Cisco IOS XE Software (17.9.5) - Cisco — Cisco IOS XE Software (17.9.4a) - Cisco — Cisco IOS XE Software (17.9.5a) - Cisco — Cisco IOS XE Software (17.9.5b) - Cisco — Cisco IOS XE Software (17.9.5e) - Cisco — Cisco IOS XE Software (17.9.5f) - Cisco — Cisco IOS XE Software (17.11.1) - Cisco — Cisco IOS XE Software (17.11.1a) - Cisco — Cisco IOS XE Software (17.12.1) - Cisco — Cisco IOS XE Software (17.12.1w) - Cisco — Cisco IOS XE Software (17.12.1a) - Cisco — Cisco IOS XE Software (17.12.1x) - Cisco — Cisco IOS XE Software (17.12.2) - Cisco — Cisco IOS XE Software (17.12.3) - Cisco — Cisco IOS XE Software (17.12.2a) - Cisco — Cisco IOS XE Software (17.12.1y) - Cisco — Cisco IOS XE Software (17.12.1z) - Cisco — Cisco IOS XE Software (17.12.3a) - Cisco — Cisco IOS XE Software (17.12.1z1) - Cisco — Cisco IOS XE Software (17.13.1) - Cisco — Cisco IOS XE Software (17.13.1a) - Cisco — Cisco IOS XE Software (17.14.1) - Cisco — Cisco IOS XE Software (17.14.1a) - Cisco — Cisco IOS XE Software (17.11.99SW) ## References - [CNA](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-wncd-p6Gvt6HL) ## Exploitation Prediction (EPSS) - **EPSS Score:** 0.24% - **EPSS Percentile:** 14.9 --- _Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._