Denial of Service Vulnerability in Cisco IOS XE Wireless Controller Software

CVE-2025-20202

What is CVE-2025-20202?

A security loophole within Cisco IOS XE Wireless Controller Software poses a risk allowing unauthenticated adjacent attackers to disrupt service by causing a denial of service (DoS) condition. This issue arises from inadequate input validation of Cisco Discovery Protocol (CDP) neighbor reports processed by the wireless controller. An attacker can leverage this vulnerability by transmitting a specially crafted CDP packet to an access point (AP). If successful, this exploit may result in an unexpected reload of the wireless controller managing the AP, severely impacting the wireless network's availability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References