CVE-2025-20202

HIGH

Published May 7, 2025 Modified Jul 8, 2025 CWE-805

Description

A vulnerability in Cisco IOS XE Wireless Controller Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of access point (AP) Cisco Discovery Protocol (CDP) neighbor reports when they are processed by the wireless controller. An attacker could exploit this vulnerability by sending a crafted CDP packet to an AP. A successful exploit could allow the attacker to cause an unexpected reload of the wireless controller that is managing the AP, resulting in a DoS condition that affects the wireless network.

Is your site exposed to CVE-2025-20202?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.4

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Weakness Type (CWE)

CWE-805 CWE-805

Affected Products

Vendor	Product	Versions
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All
cisco	ios_xe	All

References

Advisories & Patches

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-cdp-dos-fpeks9K

Frequently Asked Questions

What is CVE-2025-20202? +

How severe is CVE-2025-20202? +

CVE-2025-20202 has a CVSS v3.1 score of 7.4 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.

What products are affected by CVE-2025-20202? +

CVE-2025-20202 affects products from cisco, specifically: ios_xe. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2025-20202? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-58774

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful …

CVE-2026-119756 9.8

Tasmota through 16.0.0, fixed in commit e97e1e4, contains a heap out-of-bounds write vulnerability in SendReceiveDeviceGroupMessage() that allows unauthenticated attackers on …

CVE-2026-12087 9.1

Socket versions before 2.041 for Perl have an out-of-bounds heap read. In Socket.xs, pack_ip_mreq_source() checks the length of its source …

CVE-2026-47711 8.6

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4, 1.5.1, and …

CVE-2025-20315 8.6

A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker …

CVE-2024-37305 8.2

oqs-provider is a provider for the OpenSSL 3 cryptography library that adds support for post-quantum cryptography in TLS, X.509, and …