NCSC-VD-2507-001-03
Severity Level: Critical
Reference No.: NCSC-VD-2507-001-03
Cisco
Description
CVE-2025-20337: Insufficient validation of user-supplied input in a Cisco ISE API allows an unauthenticated remote attacker to execute arbitrary code on the underlying operating system as root.
Vulnerabilities
- CVE-2025-20337
Insufficient validation of user-supplied input in a Cisco ISE API allows an unauthenticated remote attacker to execute arbitrary code on the underlying operating system as root.