InfoSecBulletin Cybersecurity for mankind
Cisco has updated its Identity Services Engine (ISE) to fix two critical security flaws that could let remote attackers execute arbitrary commands and gain elevated privileges on affected devices.
The vulnerabilities are listed below:
U.K. orders Apple to let it spy on users’ encrypted accounts: Report
(CVE-2024-21413), (CVE-2025-0411)
Microsoft Outlook and 7 zip Vuln actively exploited; CISA Warns
Hacker Claims 20 Million OpenAI Logins for sale
Cisco Patches Critical Identity Services Engine (ISE) Vulnerabilities
Paragon spyware targeted victims in dozens of European countries: Italy says
Sophisticated malware attack on Indian Banks; Exposes 50,000 users
OPA Gatekeeper Bypass Unveils Risks in Kubernetes Policy Engines
(CVE-2025-23419)
F5 Warns of TLS Session Resumption Vulnerability in NGINX
Ransomware payments statistics for 2024, a drop of 35%
CISA Adds 4 Actively Exploited Vuls to KEV Catalog
CVE-2025-20124 (CVSS score: 9.9): A vulnerability in a Cisco ISE API that allows an authenticated attacker to run commands as the root user on a device.
CVE-2025-20125 (CVSS score: 9.1) – An authentication issue in Cisco ISE’s API could allow a remote attacker with read-only access to retrieve sensitive data, modify settings, and restart the system.
An attacker could exploit these flaws by sending a specially crafted Java object or an HTTP request to a specific API endpoint, resulting in privilege escalation and code execution.
Cisco stated that the two vulnerabilities are independent and have no available workarounds. They have been resolved in the following versions:
Cisco ISE software release 3.0 (Migrate to a fixed release)
Cisco ISE software release 3.1 (Fixed in 3.1P10)
Cisco ISE software release 3.2 (Fixed in 3.2P7)
Cisco ISE software release 3.3 (Fixed in 3.3P4)
Cisco ISE software release 3.4 (Not vulnerable)
Deloitte security researchers Dan Marin and Sebastian Radulea discovered and reported the vulnerabilities. The networking equipment company is not aware of any malicious use of the flaws but advises users to keep their systems updated for better protection.
Sophisticated malware attack on Indian Banks; Exposes 50,000 users
