Cisco Security Updates – 22 May 2025

The addressed vulnerabilities could allow the attacker to perform cross-site scripting attacks, manipulate files, escalate privileges, conduct denial of service attacks, or execute arbitrary code and gain access to the affected systems.

Sample of addressed vulnerabilities:

1. Cisco Identity Services Engine RADIUS Denial of Service Vulnerability (CVE- 2025-20152):

• CVSS: 8.6
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Denial of Service

2. Cisco Unified Intelligence Center Privilege Escalation Vulnerability (CVE-2025-20113):

• CVSS: 7.1
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: Low
• User Interaction: None
• Consequences: Gain Privileges

Sample of the affected products:

• Cisco Unified CCE Cloud Connect.
• Cisco Unified Communications.
• Contact Center Solutions.
• Cisco Duo self-service portal.
• Cisco ISE.
• Cisco Secure Network Analytics Manager.