CVE-2025-20124 - Vulnerability Details

Vendors	Products
Cisco	Identity Services Engine

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multivuls-FTW9AOXF

Type	Values Removed	Values Added
First Time appeared		Cisco Cisco identity Services Engine
CPEs		cpe:2.3:a:cisco:identity_services_engine:::::::: cpe:2.3:a:cisco:identity_services_engine:3.1.0:-:::::: cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch1:::::: cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch2:::::: cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch3:::::: cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch4:::::: cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch5:::::: cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch6:::::: cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch7:::::: cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch8:::::: cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch9:::::: cpe:2.3:a:cisco:identity_services_engine:3.2.0:-:::::: cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch1:::::: cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch2:::::: cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch3:::::: cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch4:::::: cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch5:::::: cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch6:::::: cpe:2.3:a:cisco:identity_services_engine:3.3.0:-:::::: cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch1:::::: cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch2:::::: cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch3::::::
Vendors & Products		Cisco Cisco identity Services Engine

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands as the root user on an affected device. This vulnerability is due to insecure deserialization of user-supplied Java byte streams by the affected software. An attacker could exploit this vulnerability by sending a crafted serialized Java object to an affected API. A successful exploit could allow the attacker to execute arbitrary commands on the device and elevate privileges. Note: To successfully exploit this vulnerability, the attacker must have valid read-only administrative credentials. In a single-node deployment, new devices will not be able to authenticate during the reload time.
Title		Cisco Identity Services Engine Java Deserialization Vulnerability
Weaknesses		CWE-502
References		https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multivuls-FTW9AOXF
Metrics		cvssV3_1 `{'score': 9.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-20124", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2024-10-10T19:15:13.211Z", "datePublished": "2025-02-05T16:12:07.999Z", "dateUpdated": "2025-02-07T04:55:28.945Z"}, "containers": {"cna": {"title": "Cisco Identity Services Engine Java Deserialization Vulnerability", "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H", "baseScore": 9.9, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}}], "descriptions": [{"lang": "en", "value": "A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands as the root user on an affected device.\r\n\r\nThis vulnerability is due to insecure deserialization of user-supplied Java byte streams by the affected software. An attacker could exploit this vulnerability by sending a crafted serialized Java object to an affected API. A successful exploit could allow the attacker to execute arbitrary commands on the device and elevate privileges.\r\nNote:&nbsp;To successfully exploit this vulnerability, the attacker must have valid read-only administrative credentials. In a single-node deployment, new devices will not be able to authenticate during the reload time."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multivuls-FTW9AOXF", "name": "cisco-sa-ise-multivuls-FTW9AOXF"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "source": {"advisory": "cisco-sa-ise-multivuls-FTW9AOXF", "discovery": "EXTERNAL", "defects": ["CSCwk14916"]}, "problemTypes": [{"descriptions": [{"lang": "en", "description": "Deserialization of Untrusted Data", "type": "cwe", "cweId": "CWE-502"}]}], "affected": [{"vendor": "Cisco", "product": "Cisco Identity Services Engine Software", "versions": [{"version": "3.0.0", "status": "affected"}, {"version": "3.0.0 p1", "status": "affected"}, {"version": "3.0.0 p2", "status": "affected"}, {"version": "3.0.0 p3", "status": "affected"}, {"version": "3.1.0", "status": "affected"}, {"version": "3.0.0 p4", "status": "affected"}, {"version": "3.1.0 p1", "status": "affected"}, {"version": "3.0.0 p5", "status": "affected"}, {"version": "3.1.0 p3", "status": "affected"}, {"version": "3.1.0 p2", "status": "affected"}, {"version": "3.0.0 p6", "status": "affected"}, {"version": "3.2.0", "status": "affected"}, {"version": "3.1.0 p4", "status": "affected"}, {"version": "2.7.0 p8", "status": "affected"}, {"version": "3.1.0 p5", "status": "affected"}, {"version": "3.2.0 p1", "status": "affected"}, {"version": "3.0.0 p7", "status": "affected"}, {"version": "3.1.0 p6", "status": "affected"}, {"version": "3.2.0 p2", "status": "affected"}, {"version": "3.1.0 p7", "status": "affected"}, {"version": "3.3.0", "status": "affected"}, {"version": "3.2.0 p3", "status": "affected"}, {"version": "3.0.0 p8", "status": "affected"}, {"version": "3.2.0 p4", "status": "affected"}, {"version": "3.1.0 p8", "status": "affected"}, {"version": "3.2.0 p5", "status": "affected"}, {"version": "3.2.0 p6", "status": "affected"}, {"version": "3.1.0 p9", "status": "affected"}, {"version": "3.3 Patch 2", "status": "affected"}, {"version": "3.3 Patch 1", "status": "affected"}, {"version": "3.3 Patch 3", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco ISE Passive Identity Connector", "versions": [{"version": "3.0.0", "status": "affected"}, {"version": "3.2.0", "status": "affected"}, {"version": "3.1.0", "status": "affected"}, {"version": "3.3.0", "status": "affected"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2025-02-05T16:12:07.999Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-02-06T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2025-20124"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-07T04:55:28.945Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2025-20124 (string)

assignerOrgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

state : PUBLISHED (string)

assignerShortName : cisco (string)

dateReserved : 2024-10-10T19:15:13.211Z (string)

datePublished : 2025-02-05T16:12:07.999Z (string)

dateUpdated : 2025-02-07T04:55:28.945Z (string)

}

containers : { »

cna : { »

title : Cisco Identity Services Engine Java Deserialization Vulnerability (string)

metrics : [ »

0 : { »

format : cvssV3_1 (string)

cvssV3_1 : { »

version : 3.1 (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H (string)

baseScore : 9.9 (number)

baseSeverity : CRITICAL (string)

attackVector : NETWORK (string)

attackComplexity : LOW (string)

privilegesRequired : LOW (string)

userInteraction : NONE (string)

scope : CHANGED (string)

confidentialityImpact : LOW (string)

integrityImpact : HIGH (string)

availabilityImpact : HIGH (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands as the root user on an affected device. This vulnerability is due to insecure deserialization of user-supplied Java byte streams by the affected software. An attacker could exploit this vulnerability by sending a crafted serialized Java object to an affected API. A successful exploit could allow the attacker to execute arbitrary commands on the device and elevate privileges. Note: To successfully exploit this vulnerability, the attacker must have valid read-only administrative credentials. In a single-node deployment, new devices will not be able to authenticate during the reload time. (string)

}

]

references : [ »

0 : { »

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multivuls-FTW9AOXF (string)

name : cisco-sa-ise-multivuls-FTW9AOXF (string)

}

]

exploits : [ »

0 : { »

lang : en (string)

value : The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory. (string)

}

]

source : { »

advisory : cisco-sa-ise-multivuls-FTW9AOXF (string)

discovery : EXTERNAL (string)

defects : [ »

0 : CSCwk14916 (string)

]

}

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

description : Deserialization of Untrusted Data (string)

type : cwe (string)

cweId : CWE-502 (string)

}

]

}

]

affected : [ »

0 : { »

vendor : Cisco (string)

product : Cisco Identity Services Engine Software (string)

versions : [ »

0 : { »

version : 3.0.0 (string)

status : affected (string)

}

1 : { »

version : 3.0.0 p1 (string)

status : affected (string)

}

2 : { »

version : 3.0.0 p2 (string)

status : affected (string)

}

3 : { »

version : 3.0.0 p3 (string)

status : affected (string)

}

4 : { »

version : 3.1.0 (string)

status : affected (string)

}

5 : { »

version : 3.0.0 p4 (string)

status : affected (string)

}

6 : { »

version : 3.1.0 p1 (string)

status : affected (string)

}

7 : { »

version : 3.0.0 p5 (string)

status : affected (string)

}

8 : { »

version : 3.1.0 p3 (string)

status : affected (string)

}

9 : { »

version : 3.1.0 p2 (string)

status : affected (string)

}

10 : { »

version : 3.0.0 p6 (string)

status : affected (string)

}

11 : { »

version : 3.2.0 (string)

status : affected (string)

}

12 : { »

version : 3.1.0 p4 (string)

status : affected (string)

}

13 : { »

version : 2.7.0 p8 (string)

status : affected (string)

}

14 : { »

version : 3.1.0 p5 (string)

status : affected (string)

}

15 : { »

version : 3.2.0 p1 (string)

status : affected (string)

}

16 : { »

version : 3.0.0 p7 (string)

status : affected (string)

}

17 : { »

version : 3.1.0 p6 (string)

status : affected (string)

}

18 : { »

version : 3.2.0 p2 (string)

status : affected (string)

}

19 : { »

version : 3.1.0 p7 (string)

status : affected (string)

}

20 : { »

version : 3.3.0 (string)

status : affected (string)

}

21 : { »

version : 3.2.0 p3 (string)

status : affected (string)

}

22 : { »

version : 3.0.0 p8 (string)

status : affected (string)

}

23 : { »

version : 3.2.0 p4 (string)

status : affected (string)

}

24 : { »

version : 3.1.0 p8 (string)

status : affected (string)

}

25 : { »

version : 3.2.0 p5 (string)

status : affected (string)

}

26 : { »

version : 3.2.0 p6 (string)

status : affected (string)

}

27 : { »

version : 3.1.0 p9 (string)

status : affected (string)

}

28 : { »

version : 3.3 Patch 2 (string)

status : affected (string)

}

29 : { »

version : 3.3 Patch 1 (string)

status : affected (string)

}

30 : { »

version : 3.3 Patch 3 (string)

status : affected (string)

}

]

defaultStatus : unknown (string)

}

1 : { »

vendor : Cisco (string)

product : Cisco ISE Passive Identity Connector (string)

versions : [ »

0 : { »

version : 3.0.0 (string)

status : affected (string)

}

1 : { »

version : 3.2.0 (string)

status : affected (string)

}

2 : { »

version : 3.1.0 (string)

status : affected (string)

}

3 : { »

version : 3.3.0 (string)

status : affected (string)

}

]

defaultStatus : unknown (string)

}

]

providerMetadata : { »

orgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

shortName : cisco (string)

dateUpdated : 2025-02-05T16:12:07.999Z (string)

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-02-06T00:00:00+00:00 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

id : CVE-2025-20124 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-02-07T04:55:28.945Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-20124", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-02-05T17:23:28.632142Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-05T17:23:34.945Z"}}], "cna": {"title": "Cisco Identity Services Engine Java Deserialization Vulnerability", "source": {"defects": ["CSCwk14916"], "advisory": "cisco-sa-ise-multivuls-FTW9AOXF", "discovery": "EXTERNAL"}, "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.9, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "Cisco", "product": "Cisco Identity Services Engine Software", "versions": [{"status": "affected", "version": "3.0.0"}, {"status": "affected", "version": "3.0.0 p1"}, {"status": "affected", "version": "3.0.0 p2"}, {"status": "affected", "version": "3.0.0 p3"}, {"status": "affected", "version": "3.1.0"}, {"status": "affected", "version": "3.0.0 p4"}, {"status": "affected", "version": "3.1.0 p1"}, {"status": "affected", "version": "3.0.0 p5"}, {"status": "affected", "version": "3.1.0 p3"}, {"status": "affected", "version": "3.1.0 p2"}, {"status": "affected", "version": "3.0.0 p6"}, {"status": "affected", "version": "3.2.0"}, {"status": "affected", "version": "3.1.0 p4"}, {"status": "affected", "version": "2.7.0 p8"}, {"status": "affected", "version": "3.1.0 p5"}, {"status": "affected", "version": "3.2.0 p1"}, {"status": "affected", "version": "3.0.0 p7"}, {"status": "affected", "version": "3.1.0 p6"}, {"status": "affected", "version": "3.2.0 p2"}, {"status": "affected", "version": "3.1.0 p7"}, {"status": "affected", "version": "3.3.0"}, {"status": "affected", "version": "3.2.0 p3"}, {"status": "affected", "version": "3.0.0 p8"}, {"status": "affected", "version": "3.2.0 p4"}, {"status": "affected", "version": "3.1.0 p8"}, {"status": "affected", "version": "3.2.0 p5"}, {"status": "affected", "version": "3.2.0 p6"}, {"status": "affected", "version": "3.1.0 p9"}, {"status": "affected", "version": "3.3 Patch 2"}, {"status": "affected", "version": "3.3 Patch 1"}, {"status": "affected", "version": "3.3 Patch 3"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco ISE Passive Identity Connector", "versions": [{"status": "affected", "version": "3.0.0"}, {"status": "affected", "version": "3.2.0"}, {"status": "affected", "version": "3.1.0"}, {"status": "affected", "version": "3.3.0"}], "defaultStatus": "unknown"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multivuls-FTW9AOXF", "name": "cisco-sa-ise-multivuls-FTW9AOXF"}], "descriptions": [{"lang": "en", "value": "A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands as the root user on an affected device.\r\n\r\nThis vulnerability is due to insecure deserialization of user-supplied Java byte streams by the affected software. An attacker could exploit this vulnerability by sending a crafted serialized Java object to an affected API. A successful exploit could allow the attacker to execute arbitrary commands on the device and elevate privileges.\r\nNote:&nbsp;To successfully exploit this vulnerability, the attacker must have valid read-only administrative credentials. In a single-node deployment, new devices will not be able to authenticate during the reload time."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-502", "description": "Deserialization of Untrusted Data"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2025-02-05T16:12:07.999Z"}}}, "cveMetadata": {"cveId": "CVE-2025-20124", "state": "PUBLISHED", "dateUpdated": "2025-02-07T04:55:28.945Z", "dateReserved": "2024-10-10T19:15:13.211Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2025-02-05T16:12:07.999Z", "assignerShortName": "cisco"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2025-20124 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-02-05T17:23:28.632142Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-02-05T17:23:34.945Z (string)

}

]

cna : { »

title : Cisco Identity Services Engine Java Deserialization Vulnerability (string)

source : { »

defects : [ »

0 : CSCwk14916 (string)

]

advisory : cisco-sa-ise-multivuls-FTW9AOXF (string)

discovery : EXTERNAL (string)

}

metrics : [ »

0 : { »

format : cvssV3_1 (string)

cvssV3_1 : { »

scope : CHANGED (string)

version : 3.1 (string)

baseScore : 9.9 (number)

attackVector : NETWORK (string)

baseSeverity : CRITICAL (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : LOW (string)

confidentialityImpact : LOW (string)

}

]

affected : [ »

0 : { »

vendor : Cisco (string)

product : Cisco Identity Services Engine Software (string)

versions : [ »

0 : { »

status : affected (string)

version : 3.0.0 (string)

}

1 : { »

status : affected (string)

version : 3.0.0 p1 (string)

}

2 : { »

status : affected (string)

version : 3.0.0 p2 (string)

}

3 : { »

status : affected (string)

version : 3.0.0 p3 (string)

}

4 : { »

status : affected (string)

version : 3.1.0 (string)

}

5 : { »

status : affected (string)

version : 3.0.0 p4 (string)

}

6 : { »

status : affected (string)

version : 3.1.0 p1 (string)

}

7 : { »

status : affected (string)

version : 3.0.0 p5 (string)

}

8 : { »

status : affected (string)

version : 3.1.0 p3 (string)

}

9 : { »

status : affected (string)

version : 3.1.0 p2 (string)

}

10 : { »

status : affected (string)

version : 3.0.0 p6 (string)

}

11 : { »

status : affected (string)

version : 3.2.0 (string)

}

12 : { »

status : affected (string)

version : 3.1.0 p4 (string)

}

13 : { »

status : affected (string)

version : 2.7.0 p8 (string)

}

14 : { »

status : affected (string)

version : 3.1.0 p5 (string)

}

15 : { »

status : affected (string)

version : 3.2.0 p1 (string)

}

16 : { »

status : affected (string)

version : 3.0.0 p7 (string)

}

17 : { »

status : affected (string)

version : 3.1.0 p6 (string)

}

18 : { »

status : affected (string)

version : 3.2.0 p2 (string)

}

19 : { »

status : affected (string)

version : 3.1.0 p7 (string)

}

20 : { »

status : affected (string)

version : 3.3.0 (string)

}

21 : { »

status : affected (string)

version : 3.2.0 p3 (string)

}

22 : { »

status : affected (string)

version : 3.0.0 p8 (string)

}

23 : { »

status : affected (string)

version : 3.2.0 p4 (string)

}

24 : { »

status : affected (string)

version : 3.1.0 p8 (string)

}

25 : { »

status : affected (string)

version : 3.2.0 p5 (string)

}

26 : { »

status : affected (string)

version : 3.2.0 p6 (string)

}

27 : { »

status : affected (string)

version : 3.1.0 p9 (string)

}

28 : { »

status : affected (string)

version : 3.3 Patch 2 (string)

}

29 : { »

status : affected (string)

version : 3.3 Patch 1 (string)

}

30 : { »

status : affected (string)

version : 3.3 Patch 3 (string)

}

]

defaultStatus : unknown (string)

}

1 : { »

vendor : Cisco (string)

product : Cisco ISE Passive Identity Connector (string)

versions : [ »

0 : { »

status : affected (string)

version : 3.0.0 (string)

}

1 : { »

status : affected (string)

version : 3.2.0 (string)

}

2 : { »

status : affected (string)

version : 3.1.0 (string)

}

3 : { »

status : affected (string)

version : 3.3.0 (string)

}

]

defaultStatus : unknown (string)

}

]

exploits : [ »

0 : { »

lang : en (string)

value : The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory. (string)

}

]

references : [ »

0 : { »

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multivuls-FTW9AOXF (string)

name : cisco-sa-ise-multivuls-FTW9AOXF (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands as the root user on an affected device. This vulnerability is due to insecure deserialization of user-supplied Java byte streams by the affected software. An attacker could exploit this vulnerability by sending a crafted serialized Java object to an affected API. A successful exploit could allow the attacker to execute arbitrary commands on the device and elevate privileges. Note: To successfully exploit this vulnerability, the attacker must have valid read-only administrative credentials. In a single-node deployment, new devices will not be able to authenticate during the reload time. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : cwe (string)

cweId : CWE-502 (string)

description : Deserialization of Untrusted Data (string)

}

]

}

]

providerMetadata : { »

orgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

shortName : cisco (string)

dateUpdated : 2025-02-05T16:12:07.999Z (string)

}

cveMetadata : { »

cveId : CVE-2025-20124 (string)

state : PUBLISHED (string)

dateUpdated : 2025-02-07T04:55:28.945Z (string)

dateReserved : 2024-10-10T19:15:13.211Z (string)

assignerOrgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

datePublished : 2025-02-05T16:12:07.999Z (string)

assignerShortName : cisco (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:*", "matchCriteriaId": "742B3761-9FD6-4E67-BDDD-D4DD2C3111D2", "versionEndExcluding": "3.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:-:*:*:*:*:*:*", "matchCriteriaId": "7A789B44-7E6C-4FE9-BD40-702A871AB8AC", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch1:*:*:*:*:*:*", "matchCriteriaId": "93920663-445E-4456-A905-81CEC6CA1833", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch2:*:*:*:*:*:*", "matchCriteriaId": "33DA5BB8-4CFE-44BD-9CEB-BC26577E8477", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch3:*:*:*:*:*:*", "matchCriteriaId": "D3AEFA85-66B5-4145-A4AD-96D1FF86B46D", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch4:*:*:*:*:*:*", "matchCriteriaId": "7A6A0697-6A9E-48EF-82D8-36C75E0CDFDC", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch5:*:*:*:*:*:*", "matchCriteriaId": "E939B65A-7912-4C36-8799-03A1526D7BD3", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch6:*:*:*:*:*:*", "matchCriteriaId": "833B438F-0869-4C0D-9952-750C00702E8D", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch7:*:*:*:*:*:*", "matchCriteriaId": "E8B2588D-01F9-450B-B2E3-ADC4125E354E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch8:*:*:*:*:*:*", "matchCriteriaId": "E41016C0-19E6-4BCC-A8DD-F6C9A2B0003E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch9:*:*:*:*:*:*", "matchCriteriaId": "654E946A-07C5-4036-BC54-85EF42B808DD", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:-:*:*:*:*:*:*", "matchCriteriaId": "7932D5D5-83E1-4BEF-845A-D0783D4BB750", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch1:*:*:*:*:*:*", "matchCriteriaId": "1B818846-4A6E-4256-B344-281E8C786C43", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch2:*:*:*:*:*:*", "matchCriteriaId": "A44858A2-922A-425A-8B38-0C47DB911A3C", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch3:*:*:*:*:*:*", "matchCriteriaId": "53484A32-757B-42F8-B655-554C34222060", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch4:*:*:*:*:*:*", "matchCriteriaId": "0CCAC61F-C273-49B3-A631-31D3AE3EB148", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch5:*:*:*:*:*:*", "matchCriteriaId": "51AEFCE6-FB4A-4B1C-A23D-83CC3CF3FBBD", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch6:*:*:*:*:*:*", "matchCriteriaId": "B452B4F0-8510-475E-9AE8-B48FABB4D7D3", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:-:*:*:*:*:*:*", "matchCriteriaId": "F1B9C2C1-59A4-49A0-9B74-83CCB063E55D", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch1:*:*:*:*:*:*", "matchCriteriaId": "DFD29A0B-0D75-4EAB-BCE0-79450EC75DD0", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch2:*:*:*:*:*:*", "matchCriteriaId": "E6C94CC4-CC08-4DAF-A606-FDAFC92720A9", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch3:*:*:*:*:*:*", "matchCriteriaId": "BB069EA3-7B8C-42B5-8035-2EE5ED3F56E4", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands as the root user on an affected device.\r\n\r\nThis vulnerability is due to insecure deserialization of user-supplied Java byte streams by the affected software. An attacker could exploit this vulnerability by sending a crafted serialized Java object to an affected API. A successful exploit could allow the attacker to execute arbitrary commands on the device and elevate privileges.\r\nNote:&nbsp;To successfully exploit this vulnerability, the attacker must have valid read-only administrative credentials. In a single-node deployment, new devices will not be able to authenticate during the reload time."}, {"lang": "es", "value": "Una vulnerabilidad en una API de Cisco ISE podr\u00eda permitir que un atacante remoto autenticado ejecute comandos arbitrarios como usuario superusuario en un dispositivo afectado. Esta vulnerabilidad se debe a la deserializaci\u00f3n insegura de secuencias de bytes de Java proporcionadas por el usuario por parte del software afectado. Un atacante podr\u00eda aprovechar esta vulnerabilidad enviando un objeto Java serializado manipulado a una API afectada. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante ejecutar comandos arbitrarios en el dispositivo y elevar privilegios. Nota: Para aprovechar esta vulnerabilidad con \u00e9xito, el atacante debe tener credenciales administrativas v\u00e1lidas de solo lectura. En una implementaci\u00f3n de un solo nodo, los dispositivos nuevos no podr\u00e1n autenticarse durante el tiempo de recarga."}], "id": "CVE-2025-20124", "lastModified": "2025-03-28T13:22:42.077", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.9, "baseSeverity": "CRITICAL", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.1, "impactScore": 6.0, "source": "psirt@cisco.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2025-02-05T17:15:22.457", "references": [{"source": "psirt@cisco.com", "tags": ["Vendor Advisory"], "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multivuls-FTW9AOXF"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-502"}], "source": "psirt@cisco.com", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 742B3761-9FD6-4E67-BDDD-D4DD2C3111D2 (string)

versionEndExcluding : 3.1 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.1.0:-:*:*:*:*:*:* (string)

matchCriteriaId : 7A789B44-7E6C-4FE9-BD40-702A871AB8AC (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch1:*:*:*:*:*:* (string)

matchCriteriaId : 93920663-445E-4456-A905-81CEC6CA1833 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch2:*:*:*:*:*:* (string)

matchCriteriaId : 33DA5BB8-4CFE-44BD-9CEB-BC26577E8477 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch3:*:*:*:*:*:* (string)

matchCriteriaId : D3AEFA85-66B5-4145-A4AD-96D1FF86B46D (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch4:*:*:*:*:*:* (string)

matchCriteriaId : 7A6A0697-6A9E-48EF-82D8-36C75E0CDFDC (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch5:*:*:*:*:*:* (string)

matchCriteriaId : E939B65A-7912-4C36-8799-03A1526D7BD3 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch6:*:*:*:*:*:* (string)

matchCriteriaId : 833B438F-0869-4C0D-9952-750C00702E8D (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch7:*:*:*:*:*:* (string)

matchCriteriaId : E8B2588D-01F9-450B-B2E3-ADC4125E354E (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch8:*:*:*:*:*:* (string)

matchCriteriaId : E41016C0-19E6-4BCC-A8DD-F6C9A2B0003E (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch9:*:*:*:*:*:* (string)

matchCriteriaId : 654E946A-07C5-4036-BC54-85EF42B808DD (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.2.0:-:*:*:*:*:*:* (string)

matchCriteriaId : 7932D5D5-83E1-4BEF-845A-D0783D4BB750 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch1:*:*:*:*:*:* (string)

matchCriteriaId : 1B818846-4A6E-4256-B344-281E8C786C43 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch2:*:*:*:*:*:* (string)

matchCriteriaId : A44858A2-922A-425A-8B38-0C47DB911A3C (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch3:*:*:*:*:*:* (string)

matchCriteriaId : 53484A32-757B-42F8-B655-554C34222060 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch4:*:*:*:*:*:* (string)

matchCriteriaId : 0CCAC61F-C273-49B3-A631-31D3AE3EB148 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch5:*:*:*:*:*:* (string)

matchCriteriaId : 51AEFCE6-FB4A-4B1C-A23D-83CC3CF3FBBD (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch6:*:*:*:*:*:* (string)

matchCriteriaId : B452B4F0-8510-475E-9AE8-B48FABB4D7D3 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.3.0:-:*:*:*:*:*:* (string)

matchCriteriaId : F1B9C2C1-59A4-49A0-9B74-83CCB063E55D (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch1:*:*:*:*:*:* (string)

matchCriteriaId : DFD29A0B-0D75-4EAB-BCE0-79450EC75DD0 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch2:*:*:*:*:*:* (string)

matchCriteriaId : E6C94CC4-CC08-4DAF-A606-FDAFC92720A9 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch3:*:*:*:*:*:* (string)

matchCriteriaId : BB069EA3-7B8C-42B5-8035-2EE5ED3F56E4 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands as the root user on an affected device. This vulnerability is due to insecure deserialization of user-supplied Java byte streams by the affected software. An attacker could exploit this vulnerability by sending a crafted serialized Java object to an affected API. A successful exploit could allow the attacker to execute arbitrary commands on the device and elevate privileges. Note: To successfully exploit this vulnerability, the attacker must have valid read-only administrative credentials. In a single-node deployment, new devices will not be able to authenticate during the reload time. (string)

}

1 : { »

lang : es (string)

value : Una vulnerabilidad en una API de Cisco ISE podría permitir que un atacante remoto autenticado ejecute comandos arbitrarios como usuario superusuario en un dispositivo afectado. Esta vulnerabilidad se debe a la deserialización insegura de secuencias de bytes de Java proporcionadas por el usuario por parte del software afectado. Un atacante podría aprovechar esta vulnerabilidad enviando un objeto Java serializado manipulado a una API afectada. Una explotación exitosa podría permitir al atacante ejecutar comandos arbitrarios en el dispositivo y elevar privilegios. Nota: Para aprovechar esta vulnerabilidad con éxito, el atacante debe tener credenciales administrativas válidas de solo lectura. En una implementación de un solo nodo, los dispositivos nuevos no podrán autenticarse durante el tiempo de recarga. (string)

}

]

id : CVE-2025-20124 (string)

lastModified : 2025-03-28T13:22:42.077 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.9 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : LOW (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : CHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.1 (number)

impactScore : 6 (number)

source : psirt@cisco.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.2 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.2 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2025-02-05T17:15:22.457 (string)

references : [ »

0 : { »

source : psirt@cisco.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multivuls-FTW9AOXF (string)

}

]

sourceIdentifier : psirt@cisco.com (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-502 (string)

}

]

source : psirt@cisco.com (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact Low

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact Low

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object