# Cisco Aironet Access Point Software (IOS XE Controller).

Every CVE that names Cisco Aironet Access Point Software (IOS XE Controller) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [A vulnerability in the IPv6 Router Advertisement (RA) packet processing of Cisco Access Point Software could allow an unauthenticated, adjacent attacker to modify the IPv6 gateway on an affected devi…](https://agentprime.io/advisories/CVE-2025-20365.md)
  `CVE-2025-20365` · CVE record: Cisco Cisco Aironet Access Point Software (IOS XE Controller) · CVSS 4.3 Medium · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-940
- [Origin validation error in Cisco Aironet Access Point Software (IOS XE Controller)](https://agentprime.io/advisories/CVE-2025-20364.md)
  `CVE-2025-20364` · CVE record: Cisco Cisco Aironet Access Point Software (IOS XE Controller) · CVSS 4.3 Medium · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-346
- [Cisco Ultra-Reliable Wireless Backhaul Software Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2024-20418.md)
  `CVE-2024-20418` · CVE record: Cisco Cisco Aironet Access Point Software (IOS XE Controller) · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Nov 2024 · Tags: Command injection
- [Improper input validation in Cisco Aironet Access Point Software and others](https://agentprime.io/advisories/CVE-2024-20271.md)
  `CVE-2024-20271` · CVE record: Cisco Cisco Aironet Access Point Software and 2 more · CVSS 8.6 High · Not analysed yet · Published 27 Mar 2024 · Tags: CWE-20
- [A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a software image that…](https://agentprime.io/advisories/CVE-2024-20265.md)
  `CVE-2024-20265` · CVE record: Cisco Cisco IOS XE Software and 3 more · CVSS 5.9 Medium · Not analysed yet · Published 27 Mar 2024 · Tags: CWE-501
- [A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition…](https://agentprime.io/advisories/CVE-2024-20354.md)
  `CVE-2024-20354` · CVE record: Cisco Cisco Aironet Access Point Software and 1 more · CVSS 4.7 Medium · Not analysed yet · Published 27 Mar 2024 · Tags: CWE-460
- [Uncontrolled resource consumption in Cisco Aironet Access Point Software and others](https://agentprime.io/advisories/CVE-2023-20176.md)
  `CVE-2023-20176` · CVE record: Cisco Cisco Aironet Access Point Software and 1 more · CVSS 5.8 Medium · Not analysed yet · Published 27 Sept 2023 · Tags: Denial of service
- [Cisco Access Point Software Uncontrolled Resource Consumption Vulnerability](https://agentprime.io/advisories/CVE-2023-20268.md)
  `CVE-2023-20268` · CVE record: Cisco Cisco Aironet Access Point Software and 2 more · CVSS 4.7 Medium · Not analysed yet · Published 27 Sept 2023 · Tags: Denial of service
- [Cisco Catalyst 9100 Series Access Points Association Request Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20945.md)
  `CVE-2022-20945` · CVE record: Cisco Cisco Aironet Access Point Software (IOS XE Controller) · CVSS 7.4 High · Not analysed yet · Published 30 Sept 2022 · Tags: Memory corruption
- [Cisco Access Points VLAN Bypass from Native VLAN Vulnerability](https://agentprime.io/advisories/CVE-2022-20728.md)
  `CVE-2022-20728` · CVE record: Cisco Cisco Aironet Access Point Software (IOS XE Controller) · CVSS 4.7 Medium · Not analysed yet · Published 30 Sept 2022 · Tags: Broken access control
- [Cisco Aironet Access Points FlexConnect Multicast DNS Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-1439.md)
  `CVE-2021-1439` · CVE record: Cisco Cisco Aironet Access Point Software (IOS XE Controller) · CVSS 7.4 High · Not analysed yet · Published 24 Mar 2021 · Tags: Memory corruption

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=cisco-aironet-access-point-software-ios-xe-controller>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/cisco-aironet-access-point-software-ios-xe-controller/>. Everything for agents: <https://agentprime.io/llms.txt>.