This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] Cisco fixes 14 vulnerabilities in various products

Cisco fixes 13 vulnerabilities in its products; the most severe of them are described below. All vulnerabilities, individual products and their fixed versions can be found in the link for each vulnerability [1].

Cisco Identity Services Engine - DoS (CVE-2025-20152)
CVSS 8.6 (High)

An unauthenticated remote attacker can perform a DoS attack in Cisco Identity Services Engine (ISE) using a specially crafted RADIUS authentication request. If Cisco ISE is used only for TACACS+, the device is not affected by this vulnerability [2].

The vulnerability is present in product:

  • *:Cisco Identity Services Engine; >=3.4, <3.4P1;

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

More information:

The vulnerability was publicly disclosed 21. 5. 2025.

Cisco Unified Intelligence Center - privilege escalation (CVE-2025-20113)
CVSS 7.1 (High)

An authenticated remote attacker can, due to insufficient server-side validation of inputs in HTTP or API requests in Cisco Unified Intelligence Center and Unified CCX, escalate their privileges to the Administrator role with rights to a limited set of functions [3].

The vulnerability is present in products:

  • *:Cisco Unified Intelligence Center; >=12.5, <12.5(1)SU ES04; >=12.6, <12.6(2)ES04;
  • *:Cisco Unified CCX; <=12.5(1)SU3;

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

More information:

The vulnerability was publicly disclosed 21. 5. 2025.

Cisco Secure Network Analytics Manager - privilege escalation (CVE-2025-20256)
CVSS 6.5 (Medium)

An authenticated remote attacker with administrator credentials can execute arbitrary commands as root on the operating system of the affected device in Cisco Secure Network Analytics Manager and Secure Network Analytics Virtual Manager due to unsanitized input in specific fields of the web management interface [4].

The vulnerability is present in product:

  • *:Cisco Secure Network Analytics; >=7.4.2; <7.5.0 SMC ROLLUP20250408-01; >=7.5:1, <7.5.1 SMC ROLLUP20250415-01; >=7.5.2, <7.5.2 SMC ROLLUP20250416-01;

CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

More information:

  • CVE-2025-20256 at cve.org, NVD
  • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') at cwe.mitre.org

The vulnerability was publicly disclosed 21. 5. 2025.

Cisco Unified Contact Center Enterprise Cloud Connect - unauthorized data read/modification (CVE-2025-20242)
CVSS 6.5 (Medium)

An unauthenticated remote attacker can, due to insufficient authentication checks in Cisco Unified Contact Center Enterprise (CCE) Cloud Connect, read or modify data on the vulnerable device without authorization by sending specific TCP data to a specific port [5].

The vulnerability is present in product:

  • *:Cisco Unified Contact Center Enterprise Cloud Connect; >=12.6, <=12.6.2;

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

More information:

The vulnerability was publicly disclosed 21. 5. 2025.

Cisco Catalyst SD-WAN Manager - arbitrary file creation (CVE-2025-20187)
CVSS 6.5 (Medium)

An authenticated remote attacker can create arbitrary files on the affected system in Cisco Catalyst SD-WAN Manager by sending specially crafted API requests [6].

The vulnerability is present in product:

  • *:Cisco Catalyst SD-WAN Manager; >=20.9, <20.9.7; >=20.15, <20.15.2;

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

More information:

  • CVE-2025-20187 at cve.org, NVD
  • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') at cwe.mitre.org

The vulnerability was publicly disclosed 21. 5. 2025.

By CESNET, z.s.p.o. Michaela Ručková on 23. 5. 2025.

CESNET, z.s.p.o. Logo