CVE-2025-20140 - A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, adjacent wireless attacker to cause a denial of service (DoS) condition

Back Back to CVE browser

HIGH

A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, adjacent wireless attacker to cause a denial of service (DoS) condition

Published May 7, 2025

7.4

HIGH

CVSS 3.1

EPSS 0.25%

Description

A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, adjacent wireless attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper memory management. An attacker could exploit this vulnerability by sending a series of IPv6 network requests from an associated wireless IPv6 client to an affected device. To associate a client to a device, an attacker may first need to authenticate to the network, or associate freely in the case of a configured open network. A successful exploit could allow the attacker to cause the wncd process to consume available memory and eventually cause the device to stop responding, resulting in a DoS condition.

Affected products

Vendor Cisco Product Cisco IOS XE Software Default
n/a
- Version
  16.10.1
  Status
  affected
  Constraints
  -
- Version
  16.10.1a
  Status
  affected
  Constraints
  -
- Version
  16.10.1b
  Status
  affected
  Constraints
  -
- Version
  16.10.1c
  Status
  affected
  Constraints
  -
- Version
  16.10.1d
  Status
  affected
  Constraints
  -
- Version
  16.10.1e
  Status
  affected
  Constraints
  -
- Version
  16.10.1f
  Status
  affected
  Constraints
  -
- Version
  16.10.1g
  Status
  affected
  Constraints
  -
- Version
  16.10.1s
  Status
  affected
  Constraints
  -
- Version
  16.10.2
  Status
  affected
  Constraints
  -
- Version
  16.10.3
  Status
  affected
  Constraints
  -
- Version
  16.11.1
  Status
  affected
  Constraints
  -
- Version
  16.11.1a
  Status
  affected
  Constraints
  -
- Version
  16.11.1b
  Status
  affected
  Constraints
  -
- Version
  16.11.1s
  Status
  affected
  Constraints
  -
- Version
  16.11.2
  Status
  affected
  Constraints
  -
- Version
  16.12.1
  Status
  affected
  Constraints
  -
- Version
  16.12.10
  Status
  affected
  Constraints
  -
- Version
  16.12.10a
  Status
  affected
  Constraints
  -
- Version
  16.12.11
  Status
  affected
  Constraints
  -
- Version
  16.12.12
  Status
  affected
  Constraints
  -
- Version
  16.12.1a
  Status
  affected
  Constraints
  -
- Version
  16.12.1c
  Status
  affected
  Constraints
  -
- Version
  16.12.1s
  Status
  affected
  Constraints
  -
- Version
  16.12.1t
  Status
  affected
  Constraints
  -
- Version
  16.12.1w
  Status
  affected
  Constraints
  -
- Version
  16.12.1x
  Status
  affected
  Constraints
  -
- Version
  16.12.1y
  Status
  affected
  Constraints
  -
- Version
  16.12.1z1
  Status
  affected
  Constraints
  -
- Version
  16.12.1z2
  Status
  affected
  Constraints
  -
- Version
  16.12.2
  Status
  affected
  Constraints
  -
- Version
  16.12.2a
  Status
  affected
  Constraints
  -
- Version
  16.12.2s
  Status
  affected
  Constraints
  -
- Version
  16.12.3
  Status
  affected
  Constraints
  -
- Version
  16.12.3a
  Status
  affected
  Constraints
  -
- Version
  16.12.3s
  Status
  affected
  Constraints
  -
- Version
  16.12.4
  Status
  affected
  Constraints
  -
- Version
  16.12.4a
  Status
  affected
  Constraints
  -
- Version
  16.12.5
  Status
  affected
  Constraints
  -
- Version
  16.12.5a
  Status
  affected
  Constraints
  -
- Version
  16.12.5b
  Status
  affected
  Constraints
  -
- Version
  16.12.6
  Status
  affected
  Constraints
  -
- Version
  16.12.6a
  Status
  affected
  Constraints
  -
- Version
  16.12.7
  Status
  affected
  Constraints
  -
- Version
  16.12.8
  Status
  affected
  Constraints
  -
- Version
  16.12.9
  Status
  affected
  Constraints
  -
- Version
  16.4.1
  Status
  affected
  Constraints
  -
- Version
  16.4.2
  Status
  affected
  Constraints
  -
- Version
  16.4.3
  Status
  affected
  Constraints
  -
- Version
  16.5.1
  Status
  affected
  Constraints
  -
- Version
  16.5.1a
  Status
  affected
  Constraints
  -
- Version
  16.5.1b
  Status
  affected
  Constraints
  -
- Version
  16.5.2
  Status
  affected
  Constraints
  -
- Version
  16.5.3
  Status
  affected
  Constraints
  -
- Version
  16.6.1
  Status
  affected
  Constraints
  -
- Version
  16.6.10
  Status
  affected
  Constraints
  -
- Version
  16.6.2
  Status
  affected
  Constraints
  -
- Version
  16.6.3
  Status
  affected
  Constraints
  -
- Version
  16.6.4
  Status
  affected
  Constraints
  -
- Version
  16.6.4a
  Status
  affected
  Constraints
  -
- Version
  16.6.5
  Status
  affected
  Constraints
  -
- Version
  16.6.5a
  Status
  affected
  Constraints
  -
- Version
  16.6.6
  Status
  affected
  Constraints
  -
- Version
  16.6.7
  Status
  affected
  Constraints
  -
- Version
  16.6.8
  Status
  affected
  Constraints
  -
- Version
  16.6.9
  Status
  affected
  Constraints
  -
- Version
  16.7.1
  Status
  affected
  Constraints
  -
- Version
  16.7.1a
  Status
  affected
  Constraints
  -
- Version
  16.7.1b
  Status
  affected
  Constraints
  -
- Version
  16.7.2
  Status
  affected
  Constraints
  -
- Version
  16.7.3
  Status
  affected
  Constraints
  -
- Version
  16.7.4
  Status
  affected
  Constraints
  -
- Version
  16.8.1
  Status
  affected
  Constraints
  -
- Version
  16.8.1a
  Status
  affected
  Constraints
  -
- Version
  16.8.1b
  Status
  affected
  Constraints
  -
- Version
  16.8.1c
  Status
  affected
  Constraints
  -
- Version
  16.8.1d
  Status
  affected
  Constraints
  -
- Version
  16.8.1e
  Status
  affected
  Constraints
  -
- Version
  16.8.1s
  Status
  affected
  Constraints
  -
- Version
  16.8.2
  Status
  affected
  Constraints
  -
- Version
  16.8.3
  Status
  affected
  Constraints
  -
- Version
  16.9.1
  Status
  affected
  Constraints
  -
- Version
  16.9.1a
  Status
  affected
  Constraints
  -
- Version
  16.9.1b
  Status
  affected
  Constraints
  -
- Version
  16.9.1s
  Status
  affected
  Constraints
  -
- Version
  16.9.2
  Status
  affected
  Constraints
  -
- Version
  16.9.3
  Status
  affected
  Constraints
  -
- Version
  16.9.3a
  Status
  affected
  Constraints
  -
- Version
  16.9.4
  Status
  affected
  Constraints
  -
- Version
  16.9.5
  Status
  affected
  Constraints
  -
- Version
  16.9.5f
  Status
  affected
  Constraints
  -
- Version
  16.9.6
  Status
  affected
  Constraints
  -
- Version
  16.9.7
  Status
  affected
  Constraints
  -
- Version
  16.9.8
  Status
  affected
  Constraints
  -
- Version
  17.1.1
  Status
  affected
  Constraints
  -
- Version
  17.1.1a
  Status
  affected
  Constraints
  -
- Version
  17.1.1s
  Status
  affected
  Constraints
  -
- Version
  17.1.1t
  Status
  affected
  Constraints
  -
- Version
  17.1.3
  Status
  affected
  Constraints
  -
- Version
  17.10.1
  Status
  affected
  Constraints
  -
- Version
  17.10.1a
  Status
  affected
  Constraints
  -
- Version
  17.10.1b
  Status
  affected
  Constraints
  -
- Version
  17.11.1
  Status
  affected
  Constraints
  -
- Version
  17.11.1a
  Status
  affected
  Constraints
  -
- Version
  17.11.99SW
  Status
  affected
  Constraints
  -
- Version
  17.12.1
  Status
  affected
  Constraints
  -
- Version
  17.12.1a
  Status
  affected
  Constraints
  -
- Version
  17.12.1w
  Status
  affected
  Constraints
  -
- Version
  17.12.1x
  Status
  affected
  Constraints
  -
- Version
  17.12.1y
  Status
  affected
  Constraints
  -
- Version
  17.12.1z
  Status
  affected
  Constraints
  -
- Version
  17.12.1z1
  Status
  affected
  Constraints
  -
- Version
  17.12.2
  Status
  affected
  Constraints
  -
- Version
  17.12.2a
  Status
  affected
  Constraints
  -
- Version
  17.12.3
  Status
  affected
  Constraints
  -
- Version
  17.12.3a
  Status
  affected
  Constraints
  -
- Version
  17.13.1
  Status
  affected
  Constraints
  -
- Version
  17.13.1a
  Status
  affected
  Constraints
  -
- Version
  17.14.1
  Status
  affected
  Constraints
  -
- Version
  17.14.1a
  Status
  affected
  Constraints
  -
- Version
  17.2.1
  Status
  affected
  Constraints
  -
- Version
  17.2.1a
  Status
  affected
  Constraints
  -
- Version
  17.2.1r
  Status
  affected
  Constraints
  -
- Version
  17.2.1v
  Status
  affected
  Constraints
  -
- Version
  17.2.2
  Status
  affected
  Constraints
  -
- Version
  17.2.3
  Status
  affected
  Constraints
  -
- Version
  17.3.1
  Status
  affected
  Constraints
  -
- Version
  17.3.1a
  Status
  affected
  Constraints
  -
- Version
  17.3.1w
  Status
  affected
  Constraints
  -
- Version
  17.3.1x
  Status
  affected
  Constraints
  -
- Version
  17.3.1z
  Status
  affected
  Constraints
  -
- Version
  17.3.2
  Status
  affected
  Constraints
  -
- Version
  17.3.2a
  Status
  affected
  Constraints
  -
- Version
  17.3.3
  Status
  affected
  Constraints
  -
- Version
  17.3.4
  Status
  affected
  Constraints
  -
- Version
  17.3.4a
  Status
  affected
  Constraints
  -
- Version
  17.3.4b
  Status
  affected
  Constraints
  -
- Version
  17.3.4c
  Status
  affected
  Constraints
  -
- Version
  17.3.5
  Status
  affected
  Constraints
  -
- Version
  17.3.5a
  Status
  affected
  Constraints
  -
- Version
  17.3.5b
  Status
  affected
  Constraints
  -
- Version
  17.3.6
  Status
  affected
  Constraints
  -
- Version
  17.3.7
  Status
  affected
  Constraints
  -
- Version
  17.3.8
  Status
  affected
  Constraints
  -
- Version
  17.3.8a
  Status
  affected
  Constraints
  -
- Version
  17.4.1
  Status
  affected
  Constraints
  -
- Version
  17.4.1a
  Status
  affected
  Constraints
  -
- Version
  17.4.1b
  Status
  affected
  Constraints
  -
- Version
  17.4.2
  Status
  affected
  Constraints
  -
- Version
  17.4.2a
  Status
  affected
  Constraints
  -
- Version
  17.5.1
  Status
  affected
  Constraints
  -
- Version
  17.5.1a
  Status
  affected
  Constraints
  -
- Version
  17.6.1
  Status
  affected
  Constraints
  -
- Version
  17.6.1a
  Status
  affected
  Constraints
  -
- Version
  17.6.1w
  Status
  affected
  Constraints
  -
- Version
  17.6.1x
  Status
  affected
  Constraints
  -
- Version
  17.6.1y
  Status
  affected
  Constraints
  -
- Version
  17.6.1z
  Status
  affected
  Constraints
  -
- Version
  17.6.1z1
  Status
  affected
  Constraints
  -
- Version
  17.6.2
  Status
  affected
  Constraints
  -
- Version
  17.6.3
  Status
  affected
  Constraints
  -
- Version
  17.6.3a
  Status
  affected
  Constraints
  -
- Version
  17.6.4
  Status
  affected
  Constraints
  -
- Version
  17.6.5
  Status
  affected
  Constraints
  -
- Version
  17.6.5a
  Status
  affected
  Constraints
  -
- Version
  17.6.6
  Status
  affected
  Constraints
  -
- Version
  17.6.6a
  Status
  affected
  Constraints
  -
- Version
  17.6.7
  Status
  affected
  Constraints
  -
- Version
  17.6.8
  Status
  affected
  Constraints
  -
- Version
  17.6.8a
  Status
  affected
  Constraints
  -
- Version
  17.7.1
  Status
  affected
  Constraints
  -
- Version
  17.7.1a
  Status
  affected
  Constraints
  -
- Version
  17.7.1b
  Status
  affected
  Constraints
  -
- Version
  17.7.2
  Status
  affected
  Constraints
  -
- Version
  17.8.1
  Status
  affected
  Constraints
  -
- Version
  17.8.1a
  Status
  affected
  Constraints
  -
- Version
  17.9.1
  Status
  affected
  Constraints
  -
- Version
  17.9.1a
  Status
  affected
  Constraints
  -
- Version
  17.9.1w
  Status
  affected
  Constraints
  -
- Version
  17.9.1x
  Status
  affected
  Constraints
  -
- Version
  17.9.1x1
  Status
  affected
  Constraints
  -
- Version
  17.9.1y
  Status
  affected
  Constraints
  -
- Version
  17.9.1y1
  Status
  affected
  Constraints
  -
- Version
  17.9.2
  Status
  affected
  Constraints
  -
- Version
  17.9.2a
  Status
  affected
  Constraints
  -
- Version
  17.9.3
  Status
  affected
  Constraints
  -
- Version
  17.9.3a
  Status
  affected
  Constraints
  -
- Version
  17.9.4
  Status
  affected
  Constraints
  -
- Version
  17.9.4a
  Status
  affected
  Constraints
  -
- Version
  17.9.5
  Status
  affected
  Constraints
  -
- Version
  17.9.5a
  Status
  affected
  Constraints
  -
- Version
  17.9.5b
  Status
  affected
  Constraints
  -
- Version
  17.9.5e
  Status
  affected
  Constraints
  -
- Version
  17.9.5f
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Cisco

Cisco IOS XE Software

n/a

Version	Status	Constraints
16.10.1	affected	-
16.10.1a	affected	-
16.10.1b	affected	-
16.10.1c	affected	-
16.10.1d	affected	-
16.10.1e	affected	-
16.10.1f	affected	-
16.10.1g	affected	-
16.10.1s	affected	-
16.10.2	affected	-
16.10.3	affected	-
16.11.1	affected	-
16.11.1a	affected	-
16.11.1b	affected	-
16.11.1s	affected	-
16.11.2	affected	-
16.12.1	affected	-
16.12.10	affected	-
16.12.10a	affected	-
16.12.11	affected	-
16.12.12	affected	-
16.12.1a	affected	-
16.12.1c	affected	-
16.12.1s	affected	-
16.12.1t	affected	-
16.12.1w	affected	-
16.12.1x	affected	-
16.12.1y	affected	-
16.12.1z1	affected	-
16.12.1z2	affected	-
16.12.2	affected	-
16.12.2a	affected	-
16.12.2s	affected	-
16.12.3	affected	-
16.12.3a	affected	-
16.12.3s	affected	-
16.12.4	affected	-
16.12.4a	affected	-
16.12.5	affected	-
16.12.5a	affected	-
16.12.5b	affected	-
16.12.6	affected	-
16.12.6a	affected	-
16.12.7	affected	-
16.12.8	affected	-
16.12.9	affected	-
16.4.1	affected	-
16.4.2	affected	-
16.4.3	affected	-
16.5.1	affected	-
16.5.1a	affected	-
16.5.1b	affected	-
16.5.2	affected	-
16.5.3	affected	-
16.6.1	affected	-
16.6.10	affected	-
16.6.2	affected	-
16.6.3	affected	-
16.6.4	affected	-
16.6.4a	affected	-
16.6.5	affected	-
16.6.5a	affected	-
16.6.6	affected	-
16.6.7	affected	-
16.6.8	affected	-
16.6.9	affected	-
16.7.1	affected	-
16.7.1a	affected	-
16.7.1b	affected	-
16.7.2	affected	-
16.7.3	affected	-
16.7.4	affected	-
16.8.1	affected	-
16.8.1a	affected	-
16.8.1b	affected	-
16.8.1c	affected	-
16.8.1d	affected	-
16.8.1e	affected	-
16.8.1s	affected	-
16.8.2	affected	-
16.8.3	affected	-
16.9.1	affected	-
16.9.1a	affected	-
16.9.1b	affected	-
16.9.1s	affected	-
16.9.2	affected	-
16.9.3	affected	-
16.9.3a	affected	-
16.9.4	affected	-
16.9.5	affected	-
16.9.5f	affected	-
16.9.6	affected	-
16.9.7	affected	-
16.9.8	affected	-
17.1.1	affected	-
17.1.1a	affected	-
17.1.1s	affected	-
17.1.1t	affected	-
17.1.3	affected	-
17.10.1	affected	-
17.10.1a	affected	-
17.10.1b	affected	-
17.11.1	affected	-
17.11.1a	affected	-
17.11.99SW	affected	-
17.12.1	affected	-
17.12.1a	affected	-
17.12.1w	affected	-
17.12.1x	affected	-
17.12.1y	affected	-
17.12.1z	affected	-
17.12.1z1	affected	-
17.12.2	affected	-
17.12.2a	affected	-
17.12.3	affected	-
17.12.3a	affected	-
17.13.1	affected	-
17.13.1a	affected	-
17.14.1	affected	-
17.14.1a	affected	-
17.2.1	affected	-
17.2.1a	affected	-
17.2.1r	affected	-
17.2.1v	affected	-
17.2.2	affected	-
17.2.3	affected	-
17.3.1	affected	-
17.3.1a	affected	-
17.3.1w	affected	-
17.3.1x	affected	-
17.3.1z	affected	-
17.3.2	affected	-
17.3.2a	affected	-
17.3.3	affected	-
17.3.4	affected	-
17.3.4a	affected	-
17.3.4b	affected	-
17.3.4c	affected	-
17.3.5	affected	-
17.3.5a	affected	-
17.3.5b	affected	-
17.3.6	affected	-
17.3.7	affected	-
17.3.8	affected	-
17.3.8a	affected	-
17.4.1	affected	-
17.4.1a	affected	-
17.4.1b	affected	-
17.4.2	affected	-
17.4.2a	affected	-
17.5.1	affected	-
17.5.1a	affected	-
17.6.1	affected	-
17.6.1a	affected	-
17.6.1w	affected	-
17.6.1x	affected	-
17.6.1y	affected	-
17.6.1z	affected	-
17.6.1z1	affected	-
17.6.2	affected	-
17.6.3	affected	-
17.6.3a	affected	-
17.6.4	affected	-
17.6.5	affected	-
17.6.5a	affected	-
17.6.6	affected	-
17.6.6a	affected	-
17.6.7	affected	-
17.6.8	affected	-
17.6.8a	affected	-
17.7.1	affected	-
17.7.1a	affected	-
17.7.1b	affected	-
17.7.2	affected	-
17.8.1	affected	-
17.8.1a	affected	-
17.9.1	affected	-
17.9.1a	affected	-
17.9.1w	affected	-
17.9.1x	affected	-
17.9.1x1	affected	-
17.9.1y	affected	-
17.9.1y1	affected	-
17.9.2	affected	-
17.9.2a	affected	-
17.9.3	affected	-
17.9.3a	affected	-
17.9.4	affected	-
17.9.4a	affected	-
17.9.5	affected	-
17.9.5a	affected	-
17.9.5b	affected	-
17.9.5e	affected	-
17.9.5f	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-789

References (1)

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-wncd-p6Gvt6HL
Vendor Advisory

Link	Providers	Tags
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-wncd-p6Gvt6HL		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner cisco

Published May 7, 2025

Updated May 7, 2025

Reserved Oct 10, 2024

Link CVE-2025-20140

CISA Vulnrichment

Updated May 7, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2025-20140

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-20140