Skip to content
NewA calmer, faster ZeroHour
VulnerabilitycriticalExploited in the wild

CISA Warns of Exploited Vulnerabilities in Cisco Products

Infosecurity Magazineby Kevin Poireault ()1 min read1 · 1 read
Analyze CVE-2025-20281 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2023-2533
CSRF Flaw in PaperCut NG/MF Enables Security Changes and Arbitrary Code Execution
8.829%KEVPoC
KEV
CVE-2025-20281
Unauthenticated Root RCE via API Injection in Cisco ISE and ISE-PIC
10.098%KEVPoC
KEV
CVE-2025-20337
Unauthenticated Injection Flaw Allows Root RCE in Cisco ISE and ISE-PIC
10.074%KEV
KEV

From the original article

1 min read at infosecurity-magazine.com

The US Cybersecurity and Infrastructure Security Agency (CISA) added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on July 28.

Infosecurity Magazine

By Kevin Poireault · infosecurity-magazine.com

Read the full article at Infosecurity Magazine

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.