Remote Code Execution Vulnerability in Cisco ISE API

CVE-2025-20284

What is CVE-2025-20284?

A security flaw in the Cisco Identity Services Engine (ISE) and Cisco ISE-PIC allows an authenticated remote attacker to execute arbitrary commands at the root level on the operating system. This issue arises from inadequate validation of input provided by users. If an attacker possesses valid high-privileged credentials, they can exploit this vulnerability by sending a specially crafted API request, leading to unauthorized command execution with elevated privileges.

References