CVE-2025-20293

A vulnerability in the Day One setup process of Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for Cloud (9800-CL) could allow an unauthenticated, remote attacker to access the public-key infrastructure (PKI) server that is running on an affected device. This vulnerability is due to incomplete cleanup upon completion of the Day One setup process. An attacker could exploit this vulnerability by sending Simple Certificate Enrollment Protocol (SCEP) requests to an affected device. A successful exploit could allow the attacker to request a certificate from the virtual wireless controller and then use the acquired certificate to join an attacker-controlled device to the virtual wireless controller.

• CWE-459

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-9800cl-openscep-SB4xtxzP

Published

Sep 24, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-20288A vulnerability in the web-based management interface of Cis…5.3
• CVE-2025-20289Multiple vulnerabilities in the web-based management interfa…5.4
• CVE-2025-2029A vulnerability was found in MicroDicom DICOM Viewer 2025.1 …5.3
• CVE-2025-20290A vulnerability in the logging feature of Cisco NX-OS Softwa…5.5
• CVE-2025-20291A vulnerability in Cisco Webex Meetings could have allowed a…6.1
• CVE-2025-20292A vulnerability in the CLI of Cisco NX-OS Software could all…4.4
• CVE-2025-20294Multiple vulnerabilities in the CLI and web-based management…6.5
• CVE-2025-20295A vulnerability in the CLI of Cisco UCS Manager Software cou…6
• CVE-2025-20296A vulnerability in the web-based management interface of Cis…5.4
• CVE-2025-20297In Splunk Enterprise versions below 9.4.2, 9.3.4 and 9.2.6, …5.4
• CVE-2025-20298In Universal Forwarder for Windows versions below 9.4.2, 9.3…8
• CVE-2025-2030A vulnerability was found in Seeyon Zhiyuan Interconnect FE …7.3