Cisco Warns of Critical ISE Flaw Allowing Unauthenticated Attackers to Execute Root Code

Source: The Hacker News | Added:

Cisco has revealed a critical security vulnerability in its Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) that allows unauthenticated attackers to execute arbitrary code with elevated privileges. This vulnerability, identified as CVE-2025-20337, has a maximum CVSS score of 10.0.

---

Impact: Identity Services Engine (ISE), ISE Passive Identity Connector (ISE-PIC)

In the Wild: Unknown

Age: Newly disclosed

Remediation: Not specified

Read Full Original Article →