Critical RCE Flaws in Cisco ISE and ISE-PIC Allow Unauthenticated Attackers to Gain Root Access
Cisco has released updates to address two maximum-severity security
flaws in Identity Services Engine (ISE) and ISE Passive Identity
Connector (ISE-PIC) that could permit an unauthenticated attacker
to execute arbitrary commands as the root user. The
vulnerabilities, assigned the CVE identifiers CVE-2025-20281 and
CVE-2025-20282, carry a CVSS score of 10.0 each. A description of
the defects is
Read more https://thehackernews.com/2025/06/critical-rce-flaws-in-cisco-ise-and-ise.html