Severity
4.1MEDIUM
EPSS
0.1%
top 83.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJul 16
Description
A vulnerability in the IP Access Restriction feature of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to bypass configured IP access restrictions and log in to the device from a disallowed IP address.
This vulnerability is due to improper enforcement of access controls that are configured using the IP Access Restriction feature. An attacker could exploit this vulnerability by logging in to the API from an unauthorized source IP address. A successful exploit could all…
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:NExploitability: 2.3 | Impact: 1.4
Affected Packages3 packages
🔴Vulnerability Details
2GHSA▶
GHSA-r876-f9jj-9f73: A vulnerability in the IP Access Restriction feature of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to bypass configured↗2025-07-16
CVEList▶
Cisco Identity Services Engine IP Filter Access Restriction for Admin Access Configuration Bypass Vulnerability↗2025-07-16
📋Vendor Advisories
1Cisco▶
Cisco Identity Services Engine Authenticated Remote Code Execution and Authorization Bypass Vulnerabilities↗2025-07-16