Denial of Service Vulnerability in Cisco Identity Services Engine (ISE)

CVE-2025-20152

What is CVE-2025-20152?

A vulnerability exists in the RADIUS message processing of Cisco's Identity Services Engine (ISE). This issue arises from improper handling of specific RADIUS requests, enabling an unauthenticated, remote attacker to potentially cause a denial of service condition. By sending crafted authentication requests to a network access device (NAD) that relies on Cisco ISE for authentication, authorization, and accounting (AAA), an attacker could trigger a reload of the Cisco ISE, disrupting network operations and impacting services reliant on ISE.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References