API Vulnerability in Cisco Identity Services Engine

CVE-2025-20125

Summary

A vulnerability exists in the API of Cisco Identity Services Engine that allows authenticated remote attackers with valid read-only credentials to exploit system weaknesses. By sending a specially crafted HTTP request, attackers can potentially access sensitive information, alter system configurations, and restart the affected node. This issue arises from insufficient authorization and poor validation of user-provided data in the API. Exploitation can lead to significant security risks, particularly in single-node deployments, where new devices may fail to authenticate during restart periods.

News Articles

🔗Cyber Security Agency of Singapore

CVE-2025-20124CVE-2025-20125

Multiple Vulnerabilities in Cisco Identity Services Engine (ISE)

Cisco has released security updates to address critical vulnerabilities (CVE-2025-20124 and CVE-2025-20125) affecting their Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC), regardless of device configuration.

2 days ago

🔗CybersecurityNews

CVE-2025-20124CVE-2025-20125

Critical Cisco ISE Vulnerabilities Allow Arbitrary Command Execution Remotely

Cisco has disclosed two critical vulnerabilities in its Identity Services Engine (ISE) software that could allow authenticated, remote attackers to execute arbitrary commands, elevate privileges, and manipulate system configurations on affected devices. These vulnerabilities tracked as CVE-2025-2012...

6 days ago

References