Cisco Warns of Critical ISE Flaw Allowing Unauthenticated Attackers to Execute Root Code

Cisco has announced a critical security vulnerability, tracked as CVE-2025-20337, affecting its Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC), which could allow attackers to execute arbitrary code with elevated privileges. The vulnerability has a CVSS score of 10.0 and is comparable to the previously patched CVE-2025-20281.

Explain It To Me Like I’m 5: Cisco has revealed a critical security vulnerability in its Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) that could allow attackers to run arbitrary code with high privileges, rated with a CVSS score of 10.0.

Want More Context? 🔎