CVE-2025-20337: Cisco Identity Services Engine Injection Vulnerability
A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker does not require any valid credentials to exploit this vulnerability. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted API request. A successful exploit could allow the attacker to obtain root privileges on an affected device.
Other sources
Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input allowing an attacker to exploit this vulnerability by submitting a crafted API request. Successful exploitation could allow an attacker to perform remote code execution and obtaining root privileges on an affected device.
— CISA
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-20337?
CVE-2025-20337 is rated as critical due to its potential for unauthenticated remote code execution.
How do I fix CVE-2025-20337?
To mitigate CVE-2025-20337, apply the latest security patches provided by Cisco for the affected ISE and ISE-PIC versions.
What products are affected by CVE-2025-20337?
CVE-2025-20337 affects Cisco ISE and Cisco ISE-PIC products.
What type of access is required to exploit CVE-2025-20337?
CVE-2025-20337 can be exploited by an unauthenticated attacker, meaning no valid credentials are required.
What could an attacker achieve by exploiting CVE-2025-20337?
Exploiting CVE-2025-20337 allows attackers to execute arbitrary code on the underlying operating system with root privileges.