PT-2025-39298 · Cisco · Catalyst 9800 Series Wireless Controllers For Cloud+1

Published 2025-09-24 · Updated 2025-09-25 · CVE-2025-20293

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for Cloud (9800-CL) (affected versions not specified)

Description A flaw exists in the Day One setup process that may allow a remote, unauthenticated attacker to access the public-key infrastructure (PKI) server running on an affected device. This is caused by incomplete cleanup after the Day One setup is finished. An attacker could exploit this by sending Simple Certificate Enrollment Protocol (SCEP) requests to the device. Successful exploitation could allow the attacker to request a certificate and use it to connect an attacker-controlled device to the wireless controller.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-459

Related Identifiers

BDU:2025-11712

CVE-2025-20293

Affected Products

Catalyst 9800 Series Wireless Controllers For Cloud

Cisco Ios Xe

References · 7

• https://bdu.fstec.ru/vul/2025-11712 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-20293 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-9800cl-openscep-SB4xtxzP · Vendor Advisory
• https://twitter.com/CVEnew/status/1970906977015324886 · Twitter Post
• https://t.me/CVEtracker/33259 · Telegram Post
• https://twitter.com/0dayPublishing/status/1970903573320925408 · Twitter Post
• https://twitter.com/leftSECURE/status/1971300024782111038 · Twitter Post