CVE-2025-20282

CVE Enrichment

CVSS: 10.0 CRITICAL
EPSS: 38.72%
EPSS Percentile: 98.55%
CISA KEV: Not listed

Description

A vulnerability in an internal API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device and then execute those files on the underlying operating system as root. This vulnerability is due a lack of file validation checks that would prevent uploaded files from being placed in privileged directories on an affected system. An attacker could exploit this vulnerability by uploading a crafted file to the affected device. A successful exploit could allow the attacker to store malicious files on the affected system and then execute arbitrary code or obtain root privileges on the system.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 26-Jun-2025 00:15
Last Modified: 17-Jun-2026 15:41
EPSS Date: 2026-10-12
CWE: CWE-269

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:N /
                            UI:N /
                            S:C /
                            C:H /
                            I:H /
                            A:H

Affected Products / Versions

cisco / identity_services_engine
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine:3.4.0:-:*:*:*:*:*:*
cisco / identity_services_engine
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch1:*:*:*:*:*:*
cisco / identity_services_engine_passive_identity_connector
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:-:*:*:*:*:*:*
cisco / identity_services_engine_passive_identity_connector
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch1:*:*:*:*:*:*

References

[email protected]

Last enrichment sync: 24-Oct-2026 17:34
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

This comes after Cisco patched two security vulnerabilities (CVE-2025-20281 and CVE-2025-20282) within its Identity Services Engine and ISE Passive Identity Connector, which previously allowed unauthenticated attackers Cisco Patches CVSS 10.0 Unified Communications Manager Flaw That Could Grant Root Access

CVE (2)

Threat Actors (4)

MITRE ATT&CK (1)

Vendors (1)

Products (4)

Tools (2)

Industries (3)

Countries (13)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.