CVE-2025-20281 (CVSS 10.0): Cisco ISE API Unauthenticated Remote Code Execution

[ADMIN]

CVE-2025-20281 (CVSS 10.0): Cisco ISE API Unauthenticated Remote Code Execution

Zero Day Initiative — CVE-2025-20281: Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

On January 25th, 2025, the Trend Zero Day Initiative (ZDI) received a report from Kentaro Kawane of GMO Cybersecurity by Ierae regarding a deserialization of untrusted data vulnerability in Cisco Identity Services Engine (ISE). This pre-authentication vulnerability existed in the enableStrongSwanTun

www.thezdi.com

Query:

ZoomEye: app="Cisco ISE"
HUNTER: product.name="Cisco ISE"
FOFA: app="CISCO-ISE"