BlackKite: Home
Menu

PUBLISHED DATE: May 21, 2025CVE-2025-20152:
Denial of Service Vulnerability

CVSS:
8.6
EPSS:
10.50%
Exploitability:
3.9
In KEV:
No
Description

A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of certain RADIUS requests. An attacker could exploit this vulnerability by sending a specific authentication request to a network access device (NAD) that uses Cisco ISE for authentication, authorization, and accounting (AAA). A successful exploit could allow the attacker to cause Cisco ISE to reload.

Questions to Ask Vendors
  1. Can you confirm whether your systems are affected by CVE-2025-20152, and if so, what steps are you currently taking to mitigate this vulnerability?
  2. What is your estimated timeline for fully resolving CVE-2025-20152 in your products or services, and how will you communicate updates on this issue to us as your customer?
Recommended Actions
References

Ready to get results you can trust?