CVE-2025-20365
published 2025-09-24CVE-2025-20365: A vulnerability in the IPv6 Router Advertisement (RA) packet processing of Cisco Access Point Software could allow an unauthenticated, adjacent attacker to…
PriorityP422medium4.3CVSS 3.1
AVAACLPRNUINSUCNILAN
EPSS
0.15%
5.0th percentile
A vulnerability in the IPv6 Router Advertisement (RA) packet processing of Cisco Access Point Software could allow an unauthenticated, adjacent attacker to modify the IPv6 gateway on an affected device.
This vulnerability is due to a logic error in the processing of IPv6 RA packets that are received from wireless clients. An attacker could exploit this vulnerability by associating to a wireless network and sending a series of crafted IPv6 RA packets. A successful exploit could allow the attacker to temporarily change the IPv6 gateway of an affected device. This could also lead to intermittent packet loss for any wireless clients that are associated with the affected device.
Affected
70 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | access_point | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
CVSS provenance
nvdv3.14.3MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
vendor_cisco4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-g88p-ppwj-3qff: A vulnerability in the IPv6 Router Advertisement (RA) packet processing of Cisco Access Point Software could allow an unauthenticated, adjacent attack
ghsa_unreviewed·2025-09-24
CVE-2025-20365 [MEDIUM] CWE-940 GHSA-g88p-ppwj-3qff: A vulnerability in the IPv6 Router Advertisement (RA) packet processing of Cisco Access Point Software could allow an unauthenticated, adjacent attack
A vulnerability in the IPv6 Router Advertisement (RA) packet processing of Cisco Access Point Software could allow an unauthenticated, adjacent attacker to modify the IPv6 gateway on an affected device.
This vulnerability is due to a logic error in the processing of IPv6 RA packets that are received from wireless clients. An attacker could exploit this vulnerability by associating to a wireless network and sending a series of crafted IPv6 RA packets. A successful exploit could allow the attacker to temporarily change the IPv6 gateway of an affected device. This could also lead to intermittent packet loss for any wireless clients that are associated with the affected device.
Cisco
Cisco Access Point Software Intermittent IPv6 Gateway Change Vulnerability
vendor_cisco·2025-09-24·CVSS 4.3
CVE-2025-20365 [MEDIUM] CWE-940 Cisco Access Point Software Intermittent IPv6 Gateway Change Vulnerability
Cisco Access Point Software Intermittent IPv6 Gateway Change Vulnerability
A vulnerability in the IPv6 Router Advertisement (RA) packet processing of Cisco Access Point Software could allow an unauthenticated, adjacent attacker to modify the IPv6 gateway on an affected device.
This vulnerability is due to a logic error in the processing of IPv6 RA packets that are received from wireless clients. An attacker could exploit this vulnerability by associating to a wireless network and sending a series of crafted IPv6 RA packets. A successful exploit could allow the attacker to temporarily change the IPv6 gateway of an affected device. This could also lead to intermittent packet loss for any wireless clients that are associated with the affected device.
Cisco has released software updates tha
Cisco
Cisco Access Point Software Intermittent IPv6 Gateway Change Vulnerability
vendor_cisco·CVSS 3.1
CVE-2025-20365 Cisco Access Point Software Intermittent IPv6 Gateway Change Vulnerability
CVE-2025-20365: Cisco Access Point Software Intermittent IPv6 Gateway Change Vulnerability
A vulnerability in the IPv6 Router Advertisement (RA) packet processing of Cisco Access Point Software could allow an unauthenticated, adjacent attacker to modify the IPv6 gateway on an affected device. This vulnerability is due to a logic error in the processing of IPv6 RA packets that are received from wireless clients. An attacker could exploit this vulnerability by associating to a wireless network and sending a series of crafted IPv6 RA packets. A successful exploit could allow the attacker to temporarily change the IPv6 gateway of an affected device. This could also lead to intermittent packet loss for any wireless clients that are associated with the affected device. Cisco has released softwar
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-09-24
Published