Denial of Service Vulnerability in Cisco Identity Services Engine (ISE)

CVE-2025-20152

What is CVE-2025-20152?

A vulnerability exists in the RADIUS message processing of Cisco's Identity Services Engine (ISE). This issue arises from improper handling of specific RADIUS requests, enabling an unauthenticated, remote attacker to potentially cause a denial of service condition. By sending crafted authentication requests to a network access device (NAD) that relies on Cisco ISE for authentication, authorization, and accounting (AAA), an attacker could trigger a reload of the Cisco ISE, disrupting network operations and impacting services reliant on ISE.

References