Advisories · Technology

Cisco Aironet Access Point Software (IOS XE Controller).

Every CVE that names Cisco Aironet Access Point Software (IOS XE Controller) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-20365 CVE record

CVSS 4.3 Medium

A vulnerability in the IPv6 Router Advertisement (RA) packet processing of Cisco Access Point Software could allow an unauthenticated, adjacent attacker to modify the IPv6 gateway on an affected devi…
- Cisco Aironet Access Point Software (IOS XE Controller)
- CWE-940
Not analysed yet 24 Sept 2025
CVE-2025-20364 CVE record

CVSS 4.3 Medium

Origin validation error in Cisco Aironet Access Point Software (IOS XE Controller)
- Cisco Aironet Access Point Software (IOS XE Controller)
- CWE-346
Not analysed yet 24 Sept 2025
CVE-2024-20418 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Cisco Ultra-Reliable Wireless Backhaul Software Command Injection Vulnerability
- Cisco Aironet Access Point Software (IOS XE Controller)
- Command injection
Not analysed yet 6 Nov 2024
CVE-2024-20271 CVE record

CVSS 8.6 High

Improper input validation in Cisco Aironet Access Point Software and others
- Cisco Aironet Access Point Software
- Cisco Business Wireless Access Point Software
- CWE-20
Not analysed yet 27 Mar 2024
CVE-2024-20265 CVE record

CVSS 5.9 Medium

A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a software image that…
- Cisco IOS XE Software
- Cisco Aironet Access Point Software
- CWE-501
Not analysed yet 27 Mar 2024
CVE-2024-20354 CVE record

CVSS 4.7 Medium

A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition…
- Cisco Aironet Access Point Software
- Cisco Aironet Access Point Software (IOS XE Controller)
- CWE-460
Not analysed yet 27 Mar 2024
CVE-2023-20176 CVE record

CVSS 5.8 Medium

Uncontrolled resource consumption in Cisco Aironet Access Point Software and others
- Cisco Aironet Access Point Software
- Cisco Aironet Access Point Software (IOS XE Controller)
- Denial of service
Not analysed yet 27 Sept 2023
CVE-2023-20268 CVE record

CVSS 4.7 Medium

Cisco Access Point Software Uncontrolled Resource Consumption Vulnerability
- Cisco Aironet Access Point Software
- Cisco Aironet Access Point Software (IOS XE Controller)
- Denial of service
Not analysed yet 27 Sept 2023
CVE-2022-20945 CVE record

CVSS 7.4 High

Cisco Catalyst 9100 Series Access Points Association Request Denial of Service Vulnerability
- Cisco Aironet Access Point Software (IOS XE Controller)
- Memory corruption
Not analysed yet 30 Sept 2022
CVE-2022-20728 CVE record

CVSS 4.7 Medium

Cisco Access Points VLAN Bypass from Native VLAN Vulnerability
- Cisco Aironet Access Point Software (IOS XE Controller)
- Broken access control
Not analysed yet 30 Sept 2022
CVE-2021-1439 CVE record

CVSS 7.4 High

Cisco Aironet Access Points FlexConnect Multicast DNS Denial of Service Vulnerability
- Cisco Aironet Access Point Software (IOS XE Controller)
- Memory corruption
Not analysed yet 24 Mar 2021