Remote Code Execution Vulnerability in Cisco ISE Products

CVE-2025-20281

What is CVE-2025-20281?

A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE-PIC allows unauthenticated attackers to execute arbitrary code on the underlying operating system as root. This issue arises from insufficient validation of user-supplied input through a specific API. An attacker can exploit this vulnerability by sending a specially crafted API request, potentially gaining unauthorized root privileges on affected devices, which could lead to complete system compromise. It's critical for organizations using these products to evaluate their security posture and apply necessary mitigations.

References