CVE-2025-20364
published 2025-09-24CVE-2025-20364: A vulnerability in the Device Analytics action frame processing of Cisco Wireless Access Point (AP) Software could allow an unauthenticated, adjacent attacker…
PriorityP425medium4.3CVSS 3.1
AVAACLPRNUINSUCNILAN
EPSS
0.11%
1.6th percentile
A vulnerability in the Device Analytics action frame processing of Cisco Wireless Access Point (AP) Software could allow an unauthenticated, adjacent attacker to inject wireless 802.11 action frames with arbitrary information.
This vulnerability is due to insufficient verification checks of incoming 802.11 action frames. An attacker could exploit this vulnerability by sending 802.11 Device Analytics action frames with arbitrary parameters. A successful exploit could allow the attacker to inject Device Analytics action frames with arbitrary information, which could modify the Device Analytics data of valid wireless clients that are connected to the same wireless controller.
Affected
70 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
CVSS provenance
nvdv3.14.3MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
vendor_cisco4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Wireless Access Point Software Device Analytics Action Frame Injection Vulnerability
vendor_cisco·2025-09-24·CVSS 4.3
CVE-2025-20364 [MEDIUM] CWE-346 Cisco Wireless Access Point Software Device Analytics Action Frame Injection Vulnerability
Cisco Wireless Access Point Software Device Analytics Action Frame Injection Vulnerability
A vulnerability in the Device Analytics action frame processing of Cisco Wireless Access Point (AP) Software could allow an unauthenticated, adjacent attacker to inject wireless 802.11 action frames with arbitrary information.
This vulnerability is due to insufficient verification checks of incoming 802.11 action frames. An attacker could exploit this vulnerability by sending 802.11 Device Analytics action frames with arbitrary parameters. A successful exploit could allow the attacker to inject Device Analytics action frames with arbitrary information, which could modify the Device Analytics data of valid wireless clients that are connected to the same wireless controller.
Cisco has released softw
Cisco
Cisco Wireless Access Point Software Device Analytics Action Frame Injection Vulnerability
vendor_cisco·CVSS 3.1
CVE-2025-20364 Cisco Wireless Access Point Software Device Analytics Action Frame Injection Vulnerability
CVE-2025-20364: Cisco Wireless Access Point Software Device Analytics Action Frame Injection Vulnerability
A vulnerability in the Device Analytics action frame processing of Cisco Wireless Access Point (AP) Software could allow an unauthenticated, adjacent attacker to inject wireless 802.11 action frames with arbitrary information. This vulnerability is due to insufficient verification checks of incoming 802.11 action frames. An attacker could exploit this vulnerability by sending 802.11 Device Analytics action frames with arbitrary parameters. A successful exploit could allow the attacker to inject Device Analytics action frames with arbitrary information, which could modify the Device Analytics data of valid wireless clients that are connected to the same wireless controller. Cisco has r
GHSA
GHSA-fgg9-9q62-gfxm: A vulnerability in the Device Analytics action frame processing of Cisco Wireless Access Point (AP) Software could allow an unauthenticated, adjacent
ghsa_unreviewed·2025-09-24
CVE-2025-20364 [MEDIUM] CWE-346 GHSA-fgg9-9q62-gfxm: A vulnerability in the Device Analytics action frame processing of Cisco Wireless Access Point (AP) Software could allow an unauthenticated, adjacent
A vulnerability in the Device Analytics action frame processing of Cisco Wireless Access Point (AP) Software could allow an unauthenticated, adjacent attacker to inject wireless 802.11 action frames with arbitrary information.
This vulnerability is due to insufficient verification checks of incoming 802.11 action frames. An attacker could exploit this vulnerability by sending 802.11 Device Analytics action frames with arbitrary parameters. A successful exploit could allow the attacker to inject Device Analytics action frames with arbitrary information, which could modify the Device Analytics data of valid wireless clients that are connected to the same wireless controller.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-09-24
Published