InfoSecBulletin Cybersecurity for mankind
Cisco has updated its Identity Services Engine (ISE) to fix two critical security flaws that could let remote attackers execute arbitrary commands and gain elevated privileges on affected devices.
The vulnerabilities are listed below:
400+ IPs Exploiting Multiple SSRF Vulnerabilities
NVIDIA has released update for NVIDIA Riva
CVE-2025-24201
Apple fixes 0-day exploited in “extremely sophisticated attack”
Microsoft’s March 2025 updates fix 7 zero-day, 57 flaws
Ballista Botnet infects 6000 Unpatched TP-Link Routers
CVE-2025-24813
Flaw in Apache Tomcat Exposes Servers to RCE
CISA Adds 3 Ivanti Endpoint Manager Bugs to KEV
Ransomware Attacks Set Records in February: New Data Shows
Cyber attack at Japanese telecom leader NTT hits 18,000 companies
Cyber heist: Pune losses Rs 6007 crore in cyber scam
CVE-2025-20124 (CVSS score: 9.9): A vulnerability in a Cisco ISE API that allows an authenticated attacker to run commands as the root user on a device.
CVE-2025-20125 (CVSS score: 9.1) – An authentication issue in Cisco ISE’s API could allow a remote attacker with read-only access to retrieve sensitive data, modify settings, and restart the system.
An attacker could exploit these flaws by sending a specially crafted Java object or an HTTP request to a specific API endpoint, resulting in privilege escalation and code execution.
Cisco stated that the two vulnerabilities are independent and have no available workarounds. They have been resolved in the following versions:
Cisco ISE software release 3.0 (Migrate to a fixed release)
Cisco ISE software release 3.1 (Fixed in 3.1P10)
Cisco ISE software release 3.2 (Fixed in 3.2P7)
Cisco ISE software release 3.3 (Fixed in 3.3P4)
Cisco ISE software release 3.4 (Not vulnerable)
Deloitte security researchers Dan Marin and Sebastian Radulea discovered and reported the vulnerabilities. The networking equipment company is not aware of any malicious use of the flaws but advises users to keep their systems updated for better protection.
Sophisticated malware attack on Indian Banks; Exposes 50,000 users
