Product:
Access Point Software
Summary
A vulnerability in the IPv6 Router Advertisement packet processing of Cisco Access Point Software could allow an unauthenticated, adjacent attacker to modify the IPv6 gateway on an affected device. This vulnerability is due to a logic error in the processing of IPv6 RA packets received from wireless clients. A successful exploit could allow the attacker to temporarily change the IPv6 gateway of an affected device, potentially leading to intermittent packet loss for associated wireless clients.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.3 | CVE-2025-20365 |
Exploitation
An attacker can exploit this vulnerability by associating to a wireless network and sending a series of crafted IPv6 Router Advertisement packets. By doing so, the attacker can manipulate the IPv6 gateway settings on the affected device, which may disrupt network connectivity for users connected to that device.
Affected Products
- Access Point Software: Vulnerable to IPv6 RA packet processing issues that allow gateway modification.
Mitigation
To mitigate this vulnerability, it is recommended to apply any available patches from Cisco and to monitor network traffic for unusual IPv6 RA packets. Additionally, restricting access to the wireless network can help prevent unauthorized associations.