Vulnerabilitycritical

Cisco patches critical CVE-2025-20337 bug in Identity Services Engine with CVSS 10 Severity

Security Affairsby @securityaffairsJul 17, 2025 · 10:29 UTC (Jul 17, 2025)2 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2025-20337 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2025-20337 CVE-2025-20281 CVE-2025-20282

Tags: cve-2025-20337 cve-2025-20281 cve-2025-20282 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-20281 +1 related CVE CVE-2025-20282	Unauthenticated Root RCE via API Injection in Cisco ISE and ISE-PIC	10.0	98%	KEVPoC	Jun 25, 2025 KEV Jul 28, 2025
CVE-2025-20337	Unauthenticated Injection Flaw Allows Root RCE in Cisco ISE and ISE-PIC	10.0	74%	KEV	Jul 16, 2025 KEV Jul 28, 2025

From the original article

2 min read at securityaffairs.com

Cisco warns of CVE-2025-20337, a critical ISE flaw (CVSS 10) allowing remote code execution with root privileges. Cisco addressed a critical vulnerability, tracked as CVE-2025-20337 (CVSS score of 10), in Identity Services Engine (ISE) and Cisco Identity Services Engine Passive Identity Connector (ISE-PIC).

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.