WID-SEC-W-2025-1588

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Cisco Identity Services Engine (ISE): Mehrere Schwachstellen

view advisory published 2025-07-16

Ein Angreifer kann mehrere Schwachstellen in Cisco Identity Services Engine (ISE) ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, und um Sicherheitsvorkehrungen zu umgehen.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2025-20285USmedium4.1—
A vulnerability in the IP Access Restriction feature of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to bypass configured IP access restrictions and lo…
CVE-2025-20284UShigh7.2—
A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system as root.…
CVE-2025-20283UShigh7.2—
A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system as root.…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan