DoS Vulnerability in Cisco IOS XE Software for Wireless LAN Controllers

CVE-2025-20140

What is CVE-2025-20140?

A vulnerability exists in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software, which can allow an unauthenticated adjacent wireless attacker to trigger a Denial of Service (DoS) condition. This issue stems from improper memory management within the wncd process. An attacker might exploit the vulnerability by sending a series of crafted IPv6 network requests from a compromised wireless client to an affected device. If successful, the exploit can lead to excessive memory consumption, rendering the device unresponsive and causing service disruptions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References