Cisco Warns of Critical ISE Flaw Allowing Unauthenticated Attackers to Execute Root Code

🗓️ 17 Jul 2025 05:37:00Reported by The Hacker NewsType

thn🔗 thehackernews.com👁 4 Views

Cisco warns of CVE-2025-20337 ISE flaw enabling unauthenticated root code execution; patched for 3.3 and 3.4.

Reporter	Title	Published	Views	Family All 24
BDU FSTEC	The vulnerability of the application software interface of the Cisco Identity Services Engine (ISE) and the Cisco ISE Passive Identity Connector (ISE-PIC), a virtual device for collecting user authentication data, allows a perpetrator to execute arbitrary code with root privileges.	17 Jul 202500:00	–	bdu_fstec
Circl	CVE-2025-20337	26 Jun 202504:00	–	circl
CISA KEV Catalog	Cisco Identity Services Engine Injection Vulnerability	28 Jul 202500:00	–	cisa_kev
CISA	CISA Adds Three Known Exploited Vulnerabilities to Catalog	28 Jul 202512:00	–	cisa
Cisco	Cisco Identity Services Engine Unauthenticated Remote Code Execution Vulnerabilities	25 Jun 202516:00	–	cisco
Tenable Nessus	Cisco Identity Services Engine Multiple Vulnerabilities (cisco-sa-ise-unauth-rce-ZAd2GnJ6)	16 Jul 202500:00	–	nessus
CNNVD	Cisco ISE和Cisco ISE-PIC 注入漏洞	16 Jul 202500:00	–	cnnvd
CNVD	Cisco ISE and ISE-PIC Injection Vulnerabilities (CNVD-2025-17186)	18 Jul 202500:00	–	cnvd
CVE	CVE-2025-20337	16 Jul 202516:17	–	cve
Cvelist	CVE-2025-20337 Cisco ISE API Unauthenticated Remote Code Execution Vulnerability	16 Jul 202516:17	–	cvelist

17 Jul 2025 05:37Current

10High risk

Vulners AI Score10

CVSS 3.110

EPSS0.67271

SSVC

cisco ise flaw unauthenticated access root api input validation patch release 3.3