Cisco network access security platform vulnerabilities under active exploitation
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2025-20281+1 related CVE | Unauthenticated Root RCE via API Injection in Cisco ISE and ISE-PIC | 10.0 | 98% | KEVPoC | KEV |
| CVE-2025-20337 | Unauthenticated Injection Flaw Allows Root RCE in Cisco ISE and ISE-PIC | 10.0 | 74% | KEV | KEV |
From the original article
3 min read at cyberscoop.com
The software defects, which have a maximum-severity rating, do not require authentication and allow remote attackers to execute code arbitrarily on the underlying system. The Cisco Systems logo is displayed at the Mobile World Congress (MWC) in Barcelona on February 25, 2019.
By @CyberScoopNews · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.