CVE-2025-20343: Cisco Identity Services Engine Radius Suppression Denial of Service Vulnerability
A vulnerability in the RADIUS setting Reject RADIUS requests from clients with repeated failures on Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause Cisco ISE to restart unexpectedly. This vulnerability is due to a logic error when processing a RADIUS access request for a MAC address that is already a rejected endpoint. An attacker could exploit this vulnerability by sending a specific sequence of multiple crafted RADIUS access request messages to Cisco ISE. A successful exploit could allow the attacker to cause a denial of service (DoS) condition when Cisco ISE restarts.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-20343?
CVE-2025-20343 has a high severity rating due to its potential to cause disruption in service.
How do I fix CVE-2025-20343?
To mitigate CVE-2025-20343, ensure that your Cisco Identity Services Engine is updated to the latest security patch provided by Cisco.
What are the potential impacts of CVE-2025-20343?
The exploitation of CVE-2025-20343 may allow an unauthenticated attacker to cause the Cisco ISE to restart unexpectedly, affecting network security and access.
Who is affected by CVE-2025-20343?
Organizations using the Cisco Identity Services Engine are at risk of CVE-2025-20343 if they have not applied the relevant updates.
Is CVE-2025-20343 an authenticated or unauthenticated vulnerability?
CVE-2025-20343 is an unauthenticated vulnerability, allowing remote attackers to exploit it without prior authentication.