CVE-2025-20125 - Vulnerability Details

Vendors	Products
Cisco	Identity Services Engine

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multivuls-FTW9AOXF

Type	Values Removed	Values Added
First Time appeared		Cisco Cisco identity Services Engine
Weaknesses		CWE-862
CPEs		cpe:2.3:a:cisco:identity_services_engine:::::::: cpe:2.3:a:cisco:identity_services_engine:3.1.0:-:::::: cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch1:::::: cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch2:::::: cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch3:::::: cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch4:::::: cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch5:::::: cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch6:::::: cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch7:::::: cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch8:::::: cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch9:::::: cpe:2.3:a:cisco:identity_services_engine:3.2.0:-:::::: cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch1:::::: cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch2:::::: cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch3:::::: cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch4:::::: cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch5:::::: cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch6:::::: cpe:2.3:a:cisco:identity_services_engine:3.3.0:-:::::: cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch1:::::: cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch2:::::: cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch3::::::
Vendors & Products		Cisco Cisco identity Services Engine

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker with valid read-only credentials to obtain sensitive information, change node configurations, and restart the node. This vulnerability is due to a lack of authorization in a specific API and improper validation of user-supplied data. An attacker could exploit this vulnerability by sending a crafted HTTP request to a specific API on the device. A successful exploit could allow the attacker to attacker to obtain information, modify system configuration, and reload the device. Note: To successfully exploit this vulnerability, the attacker must have valid read-only administrative credentials. In a single-node deployment, new devices will not be able to authenticate during the reload time.
Title		Cisco Identity Services Engine Insufficient Authorization Bypass Vulnerability
Weaknesses		CWE-285
References		https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multivuls-FTW9AOXF
Metrics		cvssV3_1 `{'score': 9.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-20125", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2024-10-10T19:15:13.211Z", "datePublished": "2025-02-05T16:12:17.272Z", "dateUpdated": "2025-02-05T17:21:58.525Z"}, "containers": {"cna": {"title": "Cisco Identity Services Engine Insufficient Authorization Bypass Vulnerability", "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H", "baseScore": 9.1, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "HIGH"}}], "descriptions": [{"lang": "en", "value": "A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker with valid read-only credentials to obtain sensitive information, change node configurations, and restart the node.\r\n\r\nThis vulnerability is due to a lack of authorization in a specific API and improper validation of user-supplied data. An attacker could exploit this vulnerability by sending a crafted HTTP request to a specific API on the device. A successful exploit could allow the attacker to attacker to obtain information, modify system configuration, and reload the device.\r\nNote:&nbsp;To successfully exploit this vulnerability, the attacker must have valid read-only administrative credentials. In a single-node deployment, new devices will not be able to authenticate during the reload time."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multivuls-FTW9AOXF", "name": "cisco-sa-ise-multivuls-FTW9AOXF"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "source": {"advisory": "cisco-sa-ise-multivuls-FTW9AOXF", "discovery": "EXTERNAL", "defects": ["CSCwk14901"]}, "problemTypes": [{"descriptions": [{"lang": "en", "description": "Improper Authorization", "type": "cwe", "cweId": "CWE-285"}]}], "affected": [{"vendor": "Cisco", "product": "Cisco Identity Services Engine Software", "versions": [{"version": "3.0.0", "status": "affected"}, {"version": "3.0.0 p1", "status": "affected"}, {"version": "3.0.0 p2", "status": "affected"}, {"version": "3.0.0 p3", "status": "affected"}, {"version": "3.1.0", "status": "affected"}, {"version": "3.0.0 p4", "status": "affected"}, {"version": "3.1.0 p1", "status": "affected"}, {"version": "3.0.0 p5", "status": "affected"}, {"version": "3.1.0 p3", "status": "affected"}, {"version": "3.1.0 p2", "status": "affected"}, {"version": "3.0.0 p6", "status": "affected"}, {"version": "3.2.0", "status": "affected"}, {"version": "3.1.0 p4", "status": "affected"}, {"version": "2.7.0 p8", "status": "affected"}, {"version": "3.1.0 p5", "status": "affected"}, {"version": "3.2.0 p1", "status": "affected"}, {"version": "3.0.0 p7", "status": "affected"}, {"version": "3.1.0 p6", "status": "affected"}, {"version": "3.2.0 p2", "status": "affected"}, {"version": "3.1.0 p7", "status": "affected"}, {"version": "3.3.0", "status": "affected"}, {"version": "3.2.0 p3", "status": "affected"}, {"version": "3.0.0 p8", "status": "affected"}, {"version": "3.2.0 p4", "status": "affected"}, {"version": "3.1.0 p8", "status": "affected"}, {"version": "3.2.0 p5", "status": "affected"}, {"version": "3.2.0 p6", "status": "affected"}, {"version": "3.1.0 p9", "status": "affected"}, {"version": "3.3 Patch 2", "status": "affected"}, {"version": "3.3 Patch 1", "status": "affected"}, {"version": "3.3 Patch 3", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco ISE Passive Identity Connector", "versions": [{"version": "3.0.0", "status": "affected"}, {"version": "3.2.0", "status": "affected"}, {"version": "3.1.0", "status": "affected"}, {"version": "3.3.0", "status": "affected"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2025-02-05T16:12:17.272Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-02-05T17:21:45.596897Z", "id": "CVE-2025-20125", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-05T17:21:58.525Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2025-20125 (string)

assignerOrgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

state : PUBLISHED (string)

assignerShortName : cisco (string)

dateReserved : 2024-10-10T19:15:13.211Z (string)

datePublished : 2025-02-05T16:12:17.272Z (string)

dateUpdated : 2025-02-05T17:21:58.525Z (string)

}

containers : { »

cna : { »

title : Cisco Identity Services Engine Insufficient Authorization Bypass Vulnerability (string)

metrics : [ »

0 : { »

format : cvssV3_1 (string)

cvssV3_1 : { »

version : 3.1 (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H (string)

baseScore : 9.1 (number)

baseSeverity : CRITICAL (string)

attackVector : NETWORK (string)

attackComplexity : LOW (string)

privilegesRequired : LOW (string)

userInteraction : NONE (string)

scope : CHANGED (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

availabilityImpact : HIGH (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker with valid read-only credentials to obtain sensitive information, change node configurations, and restart the node. This vulnerability is due to a lack of authorization in a specific API and improper validation of user-supplied data. An attacker could exploit this vulnerability by sending a crafted HTTP request to a specific API on the device. A successful exploit could allow the attacker to attacker to obtain information, modify system configuration, and reload the device. Note: To successfully exploit this vulnerability, the attacker must have valid read-only administrative credentials. In a single-node deployment, new devices will not be able to authenticate during the reload time. (string)

}

]

references : [ »

0 : { »

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multivuls-FTW9AOXF (string)

name : cisco-sa-ise-multivuls-FTW9AOXF (string)

}

]

exploits : [ »

0 : { »

lang : en (string)

value : The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory. (string)

}

]

source : { »

advisory : cisco-sa-ise-multivuls-FTW9AOXF (string)

discovery : EXTERNAL (string)

defects : [ »

0 : CSCwk14901 (string)

]

}

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

description : Improper Authorization (string)

type : cwe (string)

cweId : CWE-285 (string)

}

]

}

]

affected : [ »

0 : { »

vendor : Cisco (string)

product : Cisco Identity Services Engine Software (string)

versions : [ »

0 : { »

version : 3.0.0 (string)

status : affected (string)

}

1 : { »

version : 3.0.0 p1 (string)

status : affected (string)

}

2 : { »

version : 3.0.0 p2 (string)

status : affected (string)

}

3 : { »

version : 3.0.0 p3 (string)

status : affected (string)

}

4 : { »

version : 3.1.0 (string)

status : affected (string)

}

5 : { »

version : 3.0.0 p4 (string)

status : affected (string)

}

6 : { »

version : 3.1.0 p1 (string)

status : affected (string)

}

7 : { »

version : 3.0.0 p5 (string)

status : affected (string)

}

8 : { »

version : 3.1.0 p3 (string)

status : affected (string)

}

9 : { »

version : 3.1.0 p2 (string)

status : affected (string)

}

10 : { »

version : 3.0.0 p6 (string)

status : affected (string)

}

11 : { »

version : 3.2.0 (string)

status : affected (string)

}

12 : { »

version : 3.1.0 p4 (string)

status : affected (string)

}

13 : { »

version : 2.7.0 p8 (string)

status : affected (string)

}

14 : { »

version : 3.1.0 p5 (string)

status : affected (string)

}

15 : { »

version : 3.2.0 p1 (string)

status : affected (string)

}

16 : { »

version : 3.0.0 p7 (string)

status : affected (string)

}

17 : { »

version : 3.1.0 p6 (string)

status : affected (string)

}

18 : { »

version : 3.2.0 p2 (string)

status : affected (string)

}

19 : { »

version : 3.1.0 p7 (string)

status : affected (string)

}

20 : { »

version : 3.3.0 (string)

status : affected (string)

}

21 : { »

version : 3.2.0 p3 (string)

status : affected (string)

}

22 : { »

version : 3.0.0 p8 (string)

status : affected (string)

}

23 : { »

version : 3.2.0 p4 (string)

status : affected (string)

}

24 : { »

version : 3.1.0 p8 (string)

status : affected (string)

}

25 : { »

version : 3.2.0 p5 (string)

status : affected (string)

}

26 : { »

version : 3.2.0 p6 (string)

status : affected (string)

}

27 : { »

version : 3.1.0 p9 (string)

status : affected (string)

}

28 : { »

version : 3.3 Patch 2 (string)

status : affected (string)

}

29 : { »

version : 3.3 Patch 1 (string)

status : affected (string)

}

30 : { »

version : 3.3 Patch 3 (string)

status : affected (string)

}

]

defaultStatus : unknown (string)

}

1 : { »

vendor : Cisco (string)

product : Cisco ISE Passive Identity Connector (string)

versions : [ »

0 : { »

version : 3.0.0 (string)

status : affected (string)

}

1 : { »

version : 3.2.0 (string)

status : affected (string)

}

2 : { »

version : 3.1.0 (string)

status : affected (string)

}

3 : { »

version : 3.3.0 (string)

status : affected (string)

}

]

defaultStatus : unknown (string)

}

]

providerMetadata : { »

orgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

shortName : cisco (string)

dateUpdated : 2025-02-05T16:12:17.272Z (string)

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-02-05T17:21:45.596897Z (string)

id : CVE-2025-20125 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-02-05T17:21:58.525Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-20125", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-02-05T17:21:45.596897Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-05T17:21:53.695Z"}}], "cna": {"title": "Cisco Identity Services Engine Insufficient Authorization Bypass Vulnerability", "source": {"defects": ["CSCwk14901"], "advisory": "cisco-sa-ise-multivuls-FTW9AOXF", "discovery": "EXTERNAL"}, "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "Cisco", "product": "Cisco Identity Services Engine Software", "versions": [{"status": "affected", "version": "3.0.0"}, {"status": "affected", "version": "3.0.0 p1"}, {"status": "affected", "version": "3.0.0 p2"}, {"status": "affected", "version": "3.0.0 p3"}, {"status": "affected", "version": "3.1.0"}, {"status": "affected", "version": "3.0.0 p4"}, {"status": "affected", "version": "3.1.0 p1"}, {"status": "affected", "version": "3.0.0 p5"}, {"status": "affected", "version": "3.1.0 p3"}, {"status": "affected", "version": "3.1.0 p2"}, {"status": "affected", "version": "3.0.0 p6"}, {"status": "affected", "version": "3.2.0"}, {"status": "affected", "version": "3.1.0 p4"}, {"status": "affected", "version": "2.7.0 p8"}, {"status": "affected", "version": "3.1.0 p5"}, {"status": "affected", "version": "3.2.0 p1"}, {"status": "affected", "version": "3.0.0 p7"}, {"status": "affected", "version": "3.1.0 p6"}, {"status": "affected", "version": "3.2.0 p2"}, {"status": "affected", "version": "3.1.0 p7"}, {"status": "affected", "version": "3.3.0"}, {"status": "affected", "version": "3.2.0 p3"}, {"status": "affected", "version": "3.0.0 p8"}, {"status": "affected", "version": "3.2.0 p4"}, {"status": "affected", "version": "3.1.0 p8"}, {"status": "affected", "version": "3.2.0 p5"}, {"status": "affected", "version": "3.2.0 p6"}, {"status": "affected", "version": "3.1.0 p9"}, {"status": "affected", "version": "3.3 Patch 2"}, {"status": "affected", "version": "3.3 Patch 1"}, {"status": "affected", "version": "3.3 Patch 3"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco ISE Passive Identity Connector", "versions": [{"status": "affected", "version": "3.0.0"}, {"status": "affected", "version": "3.2.0"}, {"status": "affected", "version": "3.1.0"}, {"status": "affected", "version": "3.3.0"}], "defaultStatus": "unknown"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multivuls-FTW9AOXF", "name": "cisco-sa-ise-multivuls-FTW9AOXF"}], "descriptions": [{"lang": "en", "value": "A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker with valid read-only credentials to obtain sensitive information, change node configurations, and restart the node.\r\n\r\nThis vulnerability is due to a lack of authorization in a specific API and improper validation of user-supplied data. An attacker could exploit this vulnerability by sending a crafted HTTP request to a specific API on the device. A successful exploit could allow the attacker to attacker to obtain information, modify system configuration, and reload the device.\r\nNote:&nbsp;To successfully exploit this vulnerability, the attacker must have valid read-only administrative credentials. In a single-node deployment, new devices will not be able to authenticate during the reload time."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-285", "description": "Improper Authorization"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2025-02-05T16:12:17.272Z"}}}, "cveMetadata": {"cveId": "CVE-2025-20125", "state": "PUBLISHED", "dateUpdated": "2025-02-05T17:21:58.525Z", "dateReserved": "2024-10-10T19:15:13.211Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2025-02-05T16:12:17.272Z", "assignerShortName": "cisco"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2025-20125 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-02-05T17:21:45.596897Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-02-05T17:21:53.695Z (string)

}

]

cna : { »

title : Cisco Identity Services Engine Insufficient Authorization Bypass Vulnerability (string)

source : { »

defects : [ »

0 : CSCwk14901 (string)

]

advisory : cisco-sa-ise-multivuls-FTW9AOXF (string)

discovery : EXTERNAL (string)

}

metrics : [ »

0 : { »

format : cvssV3_1 (string)

cvssV3_1 : { »

scope : CHANGED (string)

version : 3.1 (string)

baseScore : 9.1 (number)

attackVector : NETWORK (string)

baseSeverity : CRITICAL (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H (string)

integrityImpact : LOW (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : LOW (string)

confidentialityImpact : LOW (string)

}

]

affected : [ »

0 : { »

vendor : Cisco (string)

product : Cisco Identity Services Engine Software (string)

versions : [ »

0 : { »

status : affected (string)

version : 3.0.0 (string)

}

1 : { »

status : affected (string)

version : 3.0.0 p1 (string)

}

2 : { »

status : affected (string)

version : 3.0.0 p2 (string)

}

3 : { »

status : affected (string)

version : 3.0.0 p3 (string)

}

4 : { »

status : affected (string)

version : 3.1.0 (string)

}

5 : { »

status : affected (string)

version : 3.0.0 p4 (string)

}

6 : { »

status : affected (string)

version : 3.1.0 p1 (string)

}

7 : { »

status : affected (string)

version : 3.0.0 p5 (string)

}

8 : { »

status : affected (string)

version : 3.1.0 p3 (string)

}

9 : { »

status : affected (string)

version : 3.1.0 p2 (string)

}

10 : { »

status : affected (string)

version : 3.0.0 p6 (string)

}

11 : { »

status : affected (string)

version : 3.2.0 (string)

}

12 : { »

status : affected (string)

version : 3.1.0 p4 (string)

}

13 : { »

status : affected (string)

version : 2.7.0 p8 (string)

}

14 : { »

status : affected (string)

version : 3.1.0 p5 (string)

}

15 : { »

status : affected (string)

version : 3.2.0 p1 (string)

}

16 : { »

status : affected (string)

version : 3.0.0 p7 (string)

}

17 : { »

status : affected (string)

version : 3.1.0 p6 (string)

}

18 : { »

status : affected (string)

version : 3.2.0 p2 (string)

}

19 : { »

status : affected (string)

version : 3.1.0 p7 (string)

}

20 : { »

status : affected (string)

version : 3.3.0 (string)

}

21 : { »

status : affected (string)

version : 3.2.0 p3 (string)

}

22 : { »

status : affected (string)

version : 3.0.0 p8 (string)

}

23 : { »

status : affected (string)

version : 3.2.0 p4 (string)

}

24 : { »

status : affected (string)

version : 3.1.0 p8 (string)

}

25 : { »

status : affected (string)

version : 3.2.0 p5 (string)

}

26 : { »

status : affected (string)

version : 3.2.0 p6 (string)

}

27 : { »

status : affected (string)

version : 3.1.0 p9 (string)

}

28 : { »

status : affected (string)

version : 3.3 Patch 2 (string)

}

29 : { »

status : affected (string)

version : 3.3 Patch 1 (string)

}

30 : { »

status : affected (string)

version : 3.3 Patch 3 (string)

}

]

defaultStatus : unknown (string)

}

1 : { »

vendor : Cisco (string)

product : Cisco ISE Passive Identity Connector (string)

versions : [ »

0 : { »

status : affected (string)

version : 3.0.0 (string)

}

1 : { »

status : affected (string)

version : 3.2.0 (string)

}

2 : { »

status : affected (string)

version : 3.1.0 (string)

}

3 : { »

status : affected (string)

version : 3.3.0 (string)

}

]

defaultStatus : unknown (string)

}

]

exploits : [ »

0 : { »

lang : en (string)

value : The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory. (string)

}

]

references : [ »

0 : { »

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multivuls-FTW9AOXF (string)

name : cisco-sa-ise-multivuls-FTW9AOXF (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker with valid read-only credentials to obtain sensitive information, change node configurations, and restart the node. This vulnerability is due to a lack of authorization in a specific API and improper validation of user-supplied data. An attacker could exploit this vulnerability by sending a crafted HTTP request to a specific API on the device. A successful exploit could allow the attacker to attacker to obtain information, modify system configuration, and reload the device. Note: To successfully exploit this vulnerability, the attacker must have valid read-only administrative credentials. In a single-node deployment, new devices will not be able to authenticate during the reload time. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : cwe (string)

cweId : CWE-285 (string)

description : Improper Authorization (string)

}

]

}

]

providerMetadata : { »

orgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

shortName : cisco (string)

dateUpdated : 2025-02-05T16:12:17.272Z (string)

}

cveMetadata : { »

cveId : CVE-2025-20125 (string)

state : PUBLISHED (string)

dateUpdated : 2025-02-05T17:21:58.525Z (string)

dateReserved : 2024-10-10T19:15:13.211Z (string)

assignerOrgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

datePublished : 2025-02-05T16:12:17.272Z (string)

assignerShortName : cisco (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:*", "matchCriteriaId": "742B3761-9FD6-4E67-BDDD-D4DD2C3111D2", "versionEndExcluding": "3.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:-:*:*:*:*:*:*", "matchCriteriaId": "7A789B44-7E6C-4FE9-BD40-702A871AB8AC", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch1:*:*:*:*:*:*", "matchCriteriaId": "93920663-445E-4456-A905-81CEC6CA1833", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch2:*:*:*:*:*:*", "matchCriteriaId": "33DA5BB8-4CFE-44BD-9CEB-BC26577E8477", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch3:*:*:*:*:*:*", "matchCriteriaId": "D3AEFA85-66B5-4145-A4AD-96D1FF86B46D", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch4:*:*:*:*:*:*", "matchCriteriaId": "7A6A0697-6A9E-48EF-82D8-36C75E0CDFDC", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch5:*:*:*:*:*:*", "matchCriteriaId": "E939B65A-7912-4C36-8799-03A1526D7BD3", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch6:*:*:*:*:*:*", "matchCriteriaId": "833B438F-0869-4C0D-9952-750C00702E8D", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch7:*:*:*:*:*:*", "matchCriteriaId": "E8B2588D-01F9-450B-B2E3-ADC4125E354E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch8:*:*:*:*:*:*", "matchCriteriaId": "E41016C0-19E6-4BCC-A8DD-F6C9A2B0003E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch9:*:*:*:*:*:*", "matchCriteriaId": "654E946A-07C5-4036-BC54-85EF42B808DD", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:-:*:*:*:*:*:*", "matchCriteriaId": "7932D5D5-83E1-4BEF-845A-D0783D4BB750", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch1:*:*:*:*:*:*", "matchCriteriaId": "1B818846-4A6E-4256-B344-281E8C786C43", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch2:*:*:*:*:*:*", "matchCriteriaId": "A44858A2-922A-425A-8B38-0C47DB911A3C", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch3:*:*:*:*:*:*", "matchCriteriaId": "53484A32-757B-42F8-B655-554C34222060", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch4:*:*:*:*:*:*", "matchCriteriaId": "0CCAC61F-C273-49B3-A631-31D3AE3EB148", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch5:*:*:*:*:*:*", "matchCriteriaId": "51AEFCE6-FB4A-4B1C-A23D-83CC3CF3FBBD", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch6:*:*:*:*:*:*", "matchCriteriaId": "B452B4F0-8510-475E-9AE8-B48FABB4D7D3", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:-:*:*:*:*:*:*", "matchCriteriaId": "F1B9C2C1-59A4-49A0-9B74-83CCB063E55D", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch1:*:*:*:*:*:*", "matchCriteriaId": "DFD29A0B-0D75-4EAB-BCE0-79450EC75DD0", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch2:*:*:*:*:*:*", "matchCriteriaId": "E6C94CC4-CC08-4DAF-A606-FDAFC92720A9", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch3:*:*:*:*:*:*", "matchCriteriaId": "BB069EA3-7B8C-42B5-8035-2EE5ED3F56E4", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker with valid read-only credentials to obtain sensitive information, change node configurations, and restart the node.\r\n\r\nThis vulnerability is due to a lack of authorization in a specific API and improper validation of user-supplied data. An attacker could exploit this vulnerability by sending a crafted HTTP request to a specific API on the device. A successful exploit could allow the attacker to attacker to obtain information, modify system configuration, and reload the device.\r\nNote:&nbsp;To successfully exploit this vulnerability, the attacker must have valid read-only administrative credentials. In a single-node deployment, new devices will not be able to authenticate during the reload time."}, {"lang": "es", "value": "Una vulnerabilidad en una API de Cisco ISE podr\u00eda permitir que un atacante remoto autenticado con credenciales v\u00e1lidas de solo lectura obtenga informaci\u00f3n confidencial, cambie las configuraciones de los nodos y reinicie el nodo. Esta vulnerabilidad se debe a la falta de autorizaci\u00f3n en una API espec\u00edfica y a una validaci\u00f3n incorrecta de los datos proporcionados por el usuario. Un atacante podr\u00eda aprovechar esta vulnerabilidad enviando una solicitud HTTP manipulada a una API espec\u00edfica en el dispositivo. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante obtener informaci\u00f3n, modificar la configuraci\u00f3n del sistema y recargar el dispositivo. Nota: Para aprovechar esta vulnerabilidad con \u00e9xito, el atacante debe tener credenciales administrativas v\u00e1lidas de solo lectura. En una implementaci\u00f3n de un solo nodo, los dispositivos nuevos no podr\u00e1n autenticarse durante el tiempo de recarga."}], "id": "CVE-2025-20125", "lastModified": "2025-03-28T13:37:16.650", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H", "version": "3.1"}, "exploitabilityScore": 3.1, "impactScore": 5.3, "source": "psirt@cisco.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2025-02-05T17:15:22.610", "references": [{"source": "psirt@cisco.com", "tags": ["Vendor Advisory"], "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multivuls-FTW9AOXF"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-285"}], "source": "psirt@cisco.com", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-862"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 742B3761-9FD6-4E67-BDDD-D4DD2C3111D2 (string)

versionEndExcluding : 3.1 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.1.0:-:*:*:*:*:*:* (string)

matchCriteriaId : 7A789B44-7E6C-4FE9-BD40-702A871AB8AC (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch1:*:*:*:*:*:* (string)

matchCriteriaId : 93920663-445E-4456-A905-81CEC6CA1833 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch2:*:*:*:*:*:* (string)

matchCriteriaId : 33DA5BB8-4CFE-44BD-9CEB-BC26577E8477 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch3:*:*:*:*:*:* (string)

matchCriteriaId : D3AEFA85-66B5-4145-A4AD-96D1FF86B46D (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch4:*:*:*:*:*:* (string)

matchCriteriaId : 7A6A0697-6A9E-48EF-82D8-36C75E0CDFDC (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch5:*:*:*:*:*:* (string)

matchCriteriaId : E939B65A-7912-4C36-8799-03A1526D7BD3 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch6:*:*:*:*:*:* (string)

matchCriteriaId : 833B438F-0869-4C0D-9952-750C00702E8D (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch7:*:*:*:*:*:* (string)

matchCriteriaId : E8B2588D-01F9-450B-B2E3-ADC4125E354E (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch8:*:*:*:*:*:* (string)

matchCriteriaId : E41016C0-19E6-4BCC-A8DD-F6C9A2B0003E (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch9:*:*:*:*:*:* (string)

matchCriteriaId : 654E946A-07C5-4036-BC54-85EF42B808DD (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.2.0:-:*:*:*:*:*:* (string)

matchCriteriaId : 7932D5D5-83E1-4BEF-845A-D0783D4BB750 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch1:*:*:*:*:*:* (string)

matchCriteriaId : 1B818846-4A6E-4256-B344-281E8C786C43 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch2:*:*:*:*:*:* (string)

matchCriteriaId : A44858A2-922A-425A-8B38-0C47DB911A3C (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch3:*:*:*:*:*:* (string)

matchCriteriaId : 53484A32-757B-42F8-B655-554C34222060 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch4:*:*:*:*:*:* (string)

matchCriteriaId : 0CCAC61F-C273-49B3-A631-31D3AE3EB148 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch5:*:*:*:*:*:* (string)

matchCriteriaId : 51AEFCE6-FB4A-4B1C-A23D-83CC3CF3FBBD (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch6:*:*:*:*:*:* (string)

matchCriteriaId : B452B4F0-8510-475E-9AE8-B48FABB4D7D3 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.3.0:-:*:*:*:*:*:* (string)

matchCriteriaId : F1B9C2C1-59A4-49A0-9B74-83CCB063E55D (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch1:*:*:*:*:*:* (string)

matchCriteriaId : DFD29A0B-0D75-4EAB-BCE0-79450EC75DD0 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch2:*:*:*:*:*:* (string)

matchCriteriaId : E6C94CC4-CC08-4DAF-A606-FDAFC92720A9 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch3:*:*:*:*:*:* (string)

matchCriteriaId : BB069EA3-7B8C-42B5-8035-2EE5ED3F56E4 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker with valid read-only credentials to obtain sensitive information, change node configurations, and restart the node. This vulnerability is due to a lack of authorization in a specific API and improper validation of user-supplied data. An attacker could exploit this vulnerability by sending a crafted HTTP request to a specific API on the device. A successful exploit could allow the attacker to attacker to obtain information, modify system configuration, and reload the device. Note: To successfully exploit this vulnerability, the attacker must have valid read-only administrative credentials. In a single-node deployment, new devices will not be able to authenticate during the reload time. (string)

}

1 : { »

lang : es (string)

value : Una vulnerabilidad en una API de Cisco ISE podría permitir que un atacante remoto autenticado con credenciales válidas de solo lectura obtenga información confidencial, cambie las configuraciones de los nodos y reinicie el nodo. Esta vulnerabilidad se debe a la falta de autorización en una API específica y a una validación incorrecta de los datos proporcionados por el usuario. Un atacante podría aprovechar esta vulnerabilidad enviando una solicitud HTTP manipulada a una API específica en el dispositivo. Una explotación exitosa podría permitir al atacante obtener información, modificar la configuración del sistema y recargar el dispositivo. Nota: Para aprovechar esta vulnerabilidad con éxito, el atacante debe tener credenciales administrativas válidas de solo lectura. En una implementación de un solo nodo, los dispositivos nuevos no podrán autenticarse durante el tiempo de recarga. (string)

}

]

id : CVE-2025-20125 (string)

lastModified : 2025-03-28T13:37:16.650 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.1 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

privilegesRequired : LOW (string)

scope : CHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.1 (number)

impactScore : 5.3 (number)

source : psirt@cisco.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.2 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.2 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2025-02-05T17:15:22.610 (string)

references : [ »

0 : { »

source : psirt@cisco.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multivuls-FTW9AOXF (string)

}

]

sourceIdentifier : psirt@cisco.com (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-285 (string)

}

]

source : psirt@cisco.com (string)

type : Primary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-862 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object