CVE-2025-20293
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-09-24

Last updated on: 2025-09-26

Assigner: Cisco Systems, Inc.

Description
A vulnerability in the Day One setup process of Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for Cloud (9800-CL) could allow an unauthenticated, remote attacker to access the public-key infrastructure (PKI) server that is running on an affected device. This vulnerability is due to incomplete cleanup upon completion of the Day One setup process. An attacker could exploit this vulnerability by sending Simple Certificate Enrollment Protocol (SCEP) requests to an affected device. A successful exploit could allow the attacker to request a certificate from the virtual wireless controller and then use the acquired certificate to join an attacker-controlled device to the virtual wireless controller.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-09-24
Last Modified
2025-09-26
Generated
2026-05-27
AI Q&A
2025-09-24
EPSS Evaluated
2026-05-25
NVD
EUVD
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
cisco ios_xe *-*-*-*-*-*-*
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-459 The product does not properly "clean up" and remove temporary or supporting resources after they have been used.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability exists in the Day One setup process of Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for Cloud (9800-CL). Due to incomplete cleanup after the setup process, an unauthenticated remote attacker can send Simple Certificate Enrollment Protocol (SCEP) requests to the device. This allows the attacker to access the public-key infrastructure (PKI) server running on the device and request a certificate, which can then be used to join an attacker-controlled device to the virtual wireless controller.


How can this vulnerability impact me? :

The vulnerability could allow an unauthenticated remote attacker to obtain a certificate from the virtual wireless controller. With this certificate, the attacker could potentially join an unauthorized device to the wireless controller, leading to unauthorized network access and potential compromise of network security.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart