PT-2025-39292 · Cisco · Cisco Access Point

Published 2025-09-24 · Updated 2025-09-24 · CVE-2025-20365

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco Access Point Software (affected versions not specified)

Description A flaw exists in the IPv6 Router Advertisement (RA) packet processing that could allow an unauthenticated, adjacent attacker to modify the IPv6 gateway on an affected device. This is due to a logic error in how IPv6 RA packets received from wireless clients are processed. An attacker can exploit this by associating with a wireless network and sending specially crafted IPv6 RA packets, potentially changing the IPv6 gateway and causing intermittent packet loss for other wireless clients. The issue enables trivial gateway hijacking.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-940

Related Identifiers

BDU:2025-11736

CVE-2025-20365

Affected Products

Cisco Access Point

References · 5

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-ipv6-gw-tUAzpn9O · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11736 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-20365 · Security Note
• https://twitter.com/CVEnew/status/1970895337846894633 · Twitter Post
• https://twitter.com/0dayPublishing/status/1970903569512477105 · Twitter Post