CVE-2025-20202

A vulnerability in Cisco IOS XE Wireless Controller Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of access point (AP) Cisco Discovery Protocol (CDP) neighbor reports when they are processed by the wireless controller. An attacker could exploit this vulnerability by sending a crafted CDP packet to an AP. A successful exploit could allow the attacker to cause an unexpected reload of the wireless controller that is managing the AP, resulting in a DoS condition that affects the wireless network.

Scoring

Severity

HIGH

CVSS base score

7.4

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

EPSS probability

0.22%

CWE

CWE-805

Published

2025-05-07

Last modified

2026-03-12

Affected products

• Cisco Cisco IOS XE Software
• Cisco Cisco IOS XE Software
• Cisco Cisco IOS XE Software
• Cisco Cisco IOS XE Software
• Cisco Cisco IOS XE Software
• Cisco Cisco IOS XE Software
• Cisco Cisco IOS XE Software
• Cisco Cisco IOS XE Software

Weakness type

• CWE-805

Related vulnerabilities

• CVE-2026-6695 — Gimp: gimp: remote code execution via crafted paa file
• CVE-2026-15028 — Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header
• CVE-2026-53877 — Heap buffer over-read in GDALRaster
• CVE-2026-12549 — Libsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserver
• CVE-2026-1767 — Localsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow leading to denial of service or information disclosure via malformed mp3 id3 tags
• CVE-2026-1766 — Localsearch: tracker-miners: gnome localsearch mp3 extractor: denial of service and information disclosure via malformed mp3 files.
• CVE-2026-12087 — Socket versions before 2.041 for Perl have an out-of-bounds heap read
• CVE-2026-34002 — Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling

Markdown version · Browse all CVEs