CVE-2025-20293 is a medium-severity vulnerability affecting Cisco IOS XE Software on Catalyst 9800 Series Wireless Controllers for Cloud (9800-CL). It stems from incomplete cleanup after the Day One setup process, allowing an unauthenticated, remote attacker to access the device's public-key infrastructure (PKI) server. The attack vector is network-based with low complexity, requiring no user interaction. A successful exploit could allow an attacker to request a certificate and then join an attacker-controlled device to the virtual wireless controller, resulting in a low impact on confidentiality. There is currently no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Cisco | Cisco IOS XE Software | 16.10.1, 16.10.1e, 16.10.1s, 16.11.1, 16.11.1a, 16.11.1b, 16.12.1, 16.12.1s, 16.12.1t, 16.12.2s, 16.12.3, 16.12.3s, 16.12.4, 16.12.4a, 16.12.5, 16.12.6, 16.12.6a, 16.12.7, 16.12.8, 17.1.1, 17.1.1s, 17.1.1t, 17.1.3, 17.10.1, 17.11.1, 17.12.1, 17.12.2, 17.13.1, 17.2.1, 17.2.1a, 17.3.1, 17.3.2, 17.3.2a, 17.3.3, 17.3.4, 17.3.4c, 17.3.5, 17.3.5a, 17.3.5b, 17.3.6, 17.3.7, 17.3.8, 17.3.8a, 17.4.1, 17.5.1, 17.6.1, 17.6.2, 17.6.3, 17.6.4, 17.6.5, 17.6.5a, 17.6.6, 17.6.6a, 17.6.7, 17.6.8, 17.7.1, 17.8.1, 17.9.1, 17.9.2, 17.9.3, 17.9.4, 17.9.4aCNA affected |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.