VULNERABILITY INTELLIGENCE

CVE-2025-20285

CVSS score4.1 MEDIUM

EPSS probability0.45%

CISA KEVNot currently listed

Published2025-07-16

Last modified2026-06-17

Description

A vulnerability in the IP Access Restriction feature of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to bypass configured IP access restrictions and log in to the device from a disallowed IP address. This vulnerability is due to improper enforcement of access controls…