Skip to content
OpenAdvisories
High · 8.6 CVE-2025-20152 EUVD-2025-16022GHSA-pmc7-hgjr-qwv3

ISE restart

Published May 21, 2025 · Updated May 21, 2025 · Assigned by cisco

Description

A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

This vulnerability is due to improper handling of certain RADIUS requests. An attacker could exploit this vulnerability by sending a specific authentication request to a network access device (NAD) that uses Cisco ISE for authentication, authorization, and accounting (AAA). A successful exploit could allow the attacker to cause Cisco ISE to reload.

Affected products

VendorProductAffectedFixed
Cisco Cisco Identity Services Engine Software 3.4.0 —

Advisories 2

References