A vulnerability in the GUI of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative privileges to upload files to an affected device. This vulnerability is due to improper validation of the file copy function. An attacker could exploit this vulnerability by sending a crafted file upload via the ISE GUI.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.9 | CVE-2025-20131 |
Exploitation
To exploit this vulnerability, an attacker must have administrative privileges and can send a crafted file upload through the ISE GUI. If successful, this could allow the attacker to upload arbitrary files to the affected system, potentially leading to further exploitation or data compromise.
Affected Products
- Cisco Identity Services Engine (ISE): A network security policy management platform that provides secure access to network resources.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest patches provided by Cisco for the affected products. Additionally, restricting administrative access and monitoring file uploads can help reduce the risk of exploitation.