Product:
Catalyst 9800 Series Wireless Controllers for Cloud
Summary
A vulnerability in the Day One setup process of Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for Cloud could allow an unauthenticated, remote attacker to access the public-key infrastructure server running on an affected device. This vulnerability is due to incomplete cleanup upon completion of the Day One setup process. An attacker could exploit this vulnerability by sending SCEP requests to an affected device.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.3 | CVE-2025-20293 |
Exploitation
An attacker can exploit this vulnerability by sending Simple Certificate Enrollment Protocol requests to the affected device. If successful, the attacker can request a certificate from the virtual wireless controller, allowing them to join an attacker-controlled device to the virtual wireless controller.
Affected Products
- Catalyst 9800-CL: Vulnerable during the Day One setup process, allowing unauthorized access to the PKI server.
Mitigation
To mitigate this vulnerability, it is recommended to ensure proper cleanup during the Day One setup process. Regularly update the software and monitor for any unauthorized access attempts to the PKI server.