PT-2025-39291 · Cisco · Cisco Wireless Access Point (Ap)

Published 2025-09-24 · Updated 2025-09-24 · CVE-2025-20364

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco Wireless Access Point (AP) Software (affected versions not specified)

Description A flaw exists in the Device Analytics action frame processing of Cisco Wireless Access Point (AP) Software. This issue could allow an unauthenticated attacker within proximity to inject wireless 802.11 action frames containing arbitrary information. The root cause is insufficient verification of incoming 802.11 action frames. Successful exploitation could allow an attacker to inject Device Analytics action frames with arbitrary parameters, potentially modifying the Device Analytics data of legitimate wireless clients connected to the same wireless controller.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

BDU:2025-11733

CVE-2025-20364

Affected Products

Cisco Wireless Access Point (Ap)

References · 6

• https://bdu.fstec.ru/vul/2025-11733 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-action-frame-inj-QqCNcz8H · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-20364 · Security Note
• https://twitter.com/0dayPublishing/status/1970903572154827146 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1970913124040491422 · Twitter Post
• https://twitter.com/CVEnew/status/1970895338920694014 · Twitter Post