CVE-2025-20140

A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, adjacent wireless attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper memory management. An attacker could exploit this vulnerability by sending a series of IPv6 network requests from an associated wireless IPv6 client to an affected device. To associate a client to a device, an attacker may first need to authenticate to the network, or associate freely in the case of a configured open network. A successful exploit could allow the attacker to cause the wncd process to consume available memory and eventually cause the device to stop responding, resulting in a DoS condition.

• cisco ios xe 16.4.1 • cisco ios xe 16.4.2 • cisco ios xe 16.4.3 • cisco ios xe 16.5.1 • cisco ios xe 16.5.1a • cisco ios xe 16.5.1b • cisco ios xe 16.5.2 • cisco ios xe 16.5.3 • cisco ios xe 16.6.1 • cisco ios xe 16.6.2 • cisco ios xe 16.6.3 • cisco ios xe 16.6.4 • cisco ios xe 16.6.4a • cisco ios xe 16.6.5 • cisco ios xe 16.6.5a • cisco ios xe 16.6.6 • cisco ios xe 16.6.7 • cisco ios xe 16.6.8 • cisco ios xe 16.6.9 • cisco ios xe 16.6.10 • cisco ios xe 16.7.1 • cisco ios xe 16.7.1a • cisco ios xe 16.7.1b • cisco ios xe 16.7.2 • cisco ios xe 16.7.3 • cisco ios xe 16.7.4 • cisco ios xe 16.8.1 • cisco ios xe 16.8.1a • cisco ios xe 16.8.1b • cisco ios xe 16.8.1c • cisco ios xe 16.8.1d • cisco ios xe 16.8.1e • cisco ios xe 16.8.1s • cisco ios xe 16.8.2 • cisco ios xe 16.8.3 • cisco ios xe 16.9.1 • cisco ios xe 16.9.1a • cisco ios xe 16.9.1b • cisco ios xe 16.9.1s • cisco ios xe 16.9.2 • cisco ios xe 16.9.3 • cisco ios xe 16.9.3a • cisco ios xe 16.9.4 • cisco ios xe 16.9.5 • cisco ios xe 16.9.5f • cisco ios xe 16.9.6 • cisco ios xe 16.9.7 • cisco ios xe 16.9.8 • cisco ios xe 16.10.1 • cisco ios xe 16.10.1a • cisco ios xe 16.10.1b • cisco ios xe 16.10.1c • cisco ios xe 16.10.1d • cisco ios xe 16.10.1e • cisco ios xe 16.10.1f • cisco ios xe 16.10.1g • cisco ios xe 16.10.1s • cisco ios xe 16.10.2 • cisco ios xe 16.10.3 • cisco ios xe 16.11.1 … and 134 more