Denial of Service Vulnerability in Cisco IOS XE Wireless Controller Software

CVE-2025-20202

Summary

A security loophole within Cisco IOS XE Wireless Controller Software poses a risk allowing unauthenticated adjacent attackers to disrupt service by causing a denial of service (DoS) condition. This issue arises from inadequate input validation of Cisco Discovery Protocol (CDP) neighbor reports processed by the wireless controller. An attacker can leverage this vulnerability by transmitting a specially crafted CDP packet to an access point (AP). If successful, this exploit may result in an unexpected reload of the wireless controller managing the AP, severely impacting the wireless network's availability.

References