DoS Vulnerability in Cisco IOS XE Software for Wireless LAN Controllers

CVE-2025-20140

What is CVE-2025-20140?

A vulnerability exists in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software, which can allow an unauthenticated adjacent wireless attacker to trigger a Denial of Service (DoS) condition. This issue stems from improper memory management within the wncd process. An attacker might exploit the vulnerability by sending a series of crafted IPv6 network requests from a compromised wireless client to an affected device. If successful, the exploit can lead to excessive memory consumption, rendering the device unresponsive and causing service disruptions.

References