CVE-2025-20125

Summary

CVE-2025-20125 is a vulnerability affecting an API in Cisco ISE. An authenticated, remote attacker with valid read-only credentials can exploit this issue to obtain sensitive information, modify node configurations, and restart the node. The root cause is a lack of authorization and insufficient validation of user-supplied data in the API. An attacker can send a specially crafted HTTP request to the API on the affected device to successfully exploit this vulnerability, potentially leading to significant system impact. In single-node deployments, new devices will be unable to authenticate during the reload time.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.