CVE-2025-20337
CISA 기관 조치 기한: 2025-08-18
Cisco Identity Services Engine
Qualys 위협 인텔 · 심각도 5/5 · QID 317666 · Cisco
공개 익스플로잇
측면이동
권한상승
원격코드실행
CISA KEV
A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker does not require any valid credentials to exploit this vulnerability.
This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted API request. A successful exploit could allow the attacker to obtain root privileges on an affected device.
This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted API request. A successful exploit could allow the attacker to obtain root privileges on an affected device.
KEV 필수 조치: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
타임라인
- NVD 공개
- CISA KEV 등재(실제 악용 확인) 공개 후 12일
- CISA 기관 조치 기한 경과
- 첫 보도 BleepingComputer · 시스코, 공격에 악용된 최대 심각도 ISE 제로데이 취약점에 대…
날짜 정보 없는 신호: 공개 PoC 1건
벡터: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
공개 익스플로잇 / PoC
- GitHub 공개 PoC 1건 — 대표 레포 ↗