Remote Code Execution Vulnerability in Cisco Identity Services Engine

CVE-2025-20283

What is CVE-2025-20283?

A security flaw in the API of Cisco Identity Services Engine (ISE) and Cisco ISE-PIC permits an authenticated, remote attacker to execute arbitrary commands on the operating system with root privileges. The vulnerability arises from inadequate validation of user-supplied input, allowing an attacker with valid high-privileged credentials to exploit the API by submitting a specially crafted request. This could lead to unauthorized command execution, posing significant security risks for organizations using these products.

References