Exploit / PoCcriticalExploited in the wild

U.S. CISA adds Cisco ISE and PaperCut NG/MF flaws to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsAug 5, 2025 · 18:59 UTC (Aug 5, 2025)3 min read1

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-20281 CVE-2025-20337 CVE-2023-2533 CVE-2025-20282

Tags: cve-2025-20281 cve-2025-20337 cve-2023-2533 cve-2025-20282 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-2533	CSRF Flaw in PaperCut NG/MF Enables Security Changes and Arbitrary Code Execution	8.8	29%	KEVPoC	Jun 20, 2023 KEV Jul 28, 2025
CVE-2025-20281 +1 related CVE CVE-2025-20282	Unauthenticated Root RCE via API Injection in Cisco ISE and ISE-PIC	10.0	98%	KEVPoC	Jun 25, 2025 KEV Jul 28, 2025
CVE-2025-20337	Unauthenticated Injection Flaw Allows Root RCE in Cisco ISE and ISE-PIC	10.0	74%	KEV	Jul 16, 2025 KEV Jul 28, 2025

From the original article

3 min read at securityaffairs.com

U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds Cisco ISE and PaperCut NG/MF flaws to its Known Exploited Vulnerabilities catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.