Skip to content
OpenAdvisories
Medium WID-SEC-2025-1588 3 CVEs

Cisco Identity Services Engine (ISE): Mehrere Schwachstellen

Published Jul 16, 2025 · Updated Jul 16, 2025 · de-DE

Vendor: Cisco Product: Identity Services Engine (ISE)

Summary

Ein Angreifer kann mehrere Schwachstellen in Cisco Identity Services Engine (ISE) ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, und um Sicherheitsvorkehrungen zu umgehen.

Product

Die Cisco Identity Services Engine (ISE) bietet eine attributbasierte Zugangs-Kontroll-Lösung.

Vulnerabilities 3

  • Medium 6.5
    CVE-2025-20283 EPSS 13%

    Cisco Identity Services Engine Authenticated Remote Code Execution Vulnerability

    A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system as root. This vulnerability is due to insufficient validation of user-supplied input. A…

    Cisco Cisco Identity Services Engine Software Network devices
  • Medium 6.5
    CVE-2025-20284 EPSS 25%

    Cisco Identity Services Engine Authenticated Remote Code Execution Vulnerability

    A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system as root. This vulnerability is due to insufficient validation of user-supplied input. A…

    Cisco Cisco Identity Services Engine Software Network devices
  • Medium 4.1
    CVE-2025-20285

    Cisco Identity Services Engine IP Filter Access Restriction for Admin Access Configuration Bypass Vulnerability

    A vulnerability in the IP Access Restriction feature of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to bypass configured IP access restrictions and log in to the device from a disallowed IP address. This vulnerability is due to i…

    Cisco Cisco Identity Services Engine Software Network devices

Revision history

  1. #1

    Initiale Fassung

References