Cisco Security Updates – 10 June 2025

The addressed vulnerabilities could allow the attacker to perform cross-site scripting attacks, bypass security restrictions, obtain sensitive information, manipulate data, gain elevated privileges, conduct denial of service attacks, or execute arbitrary code and gain access to the affected systems.

Sample of addressed vulnerabilities:

1. Cisco Identity Services Engine on Cloud Platforms Static Credential Vulnerability (CVE-2025-20286):

• CVSS: 9.9
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Bypass Security

2. Cisco Integrated Management Controller Privilege Escalation Vulnerability (CVE-2025-20261):

• CVSS: 8.8
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: Low
• User Interaction: None
• Consequences: Gain Privileges

Sample of the affected products:

• Cisco Meraki MX firmware releases (MX64, MX64, MX68W).
• Cisco Unified Intelligent Contact Management Enterprise 15.0(1) and earlier.
• Cisco ISE and Cisco ISE-PIC.
• Cisco ThousandEyes Endpoint Agent for Windows.
• Cisco ISE AWS Platform releases (3.1, 3.2, 3.3, and 3.4).