CVE-2025-20282

Published Jun 25, 2025

Last updated 3 days ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-20282 is a vulnerability affecting Cisco Identity Services Engine (ISE) and Cisco ISE-PIC release 3.4. It stems from a lack of file validation checks in an internal API, which could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. Successful exploitation of this vulnerability could allow the attacker to store malicious files on the system and subsequently execute arbitrary code with root privileges, potentially leading to complete system compromise.

Description: A vulnerability in an internal API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device and then execute those files on the underlying operating system as root. This vulnerability is due a lack of file validation checks that would prevent uploaded files from being placed in privileged directories on an affected system. An attacker could exploit this vulnerability by uploading a crafted file to the affected device. A successful exploit could allow the attacker to store malicious files on the affected system and then execute arbitrary code or obtain root privileges on the system.
Source: psirt@cisco.com
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 10
Impact score: 6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

psirt@cisco.com: CWE-269

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 1

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D23905E0-E525-49B1-8E5F-4EB42D186768"
          },
          {
            "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "74509498-38EF-4345-9583-CEF5C26CA1D8"
          },
          {
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CC0525FD-C4D7-4B48-BF35-1791391AB148"
          },
          {
            "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "68C96F6B-51EE-4D03-9598-CBFD16DA22EF"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.