A vulnerability in the GUI of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative privileges to upload files to an affected device. This vulnerability is due to improper validation of the file copy function. An attacker could exploit this vulnerability by sending a crafted file upload using the Cisco ISE GUI.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.9 | CVE-2025-20131 |
Exploitation
To exploit this vulnerability, an attacker with administrative privileges can log into the Cisco ISE GUI and perform a crafted file upload. By bypassing the file validation process, the attacker can upload arbitrary files to the system, potentially leading to further exploitation or data compromise.
Affected Products
- Cisco Identity Services Engine (ISE): A network security policy management platform that provides secure access to network resources.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security patches provided by Cisco for the Identity Services Engine. Additionally, organizations should review their access controls and limit administrative privileges to trusted personnel only.