Product:
Wireless Access Point Software
Summary
A vulnerability in the Device Analytics action frame processing of Cisco Wireless Access Point Software could allow an unauthenticated, adjacent attacker to inject wireless 802.11 action frames with arbitrary information. This vulnerability is due to insufficient verification checks of incoming 802.11 action frames. A successful exploit could allow the attacker to modify the Device Analytics data of valid wireless clients connected to the same wireless controller.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.3 | CVE-2025-20364 |
Exploitation
An attacker can exploit this vulnerability by sending specially crafted 802.11 Device Analytics action frames with arbitrary parameters to the wireless access point. Since the access point does not adequately verify these incoming frames, the attacker can inject malicious data that alters the Device Analytics information for connected clients, potentially leading to unauthorized access or manipulation of client data.
Affected Products
- Wireless Access Point Software: Vulnerable to injection of arbitrary 802.11 action frames due to insufficient verification checks.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Cisco for the Wireless Access Point Software. Additionally, network administrators should implement strict access controls and monitor wireless traffic for any suspicious activity that may indicate exploitation attempts.