{"vulnerability": "CVE-2025-20337", "sightings": [{"uuid": "27c95733-d3c6-413a-8f97-cec17419bd13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114863857818669082", "content": "", "creation_timestamp": "2025-07-16T16:29:38.164816Z"}, {"uuid": "39e97ae7-d2bf-484f-82cc-64c91122b6a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lu5bkb2kjw2f", "content": "", "creation_timestamp": "2025-07-17T06:11:15.899441Z"}, {"uuid": "5affc499-232a-4746-869d-87d1fda96cd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://thehackernews.com/2025/07/cisco-warns-of-critical-ise-flaw.html", "content": "", "creation_timestamp": "2025-07-17T03:37:00.000000Z"}, {"uuid": "bccab356-ab43-44a0-80c3-104a4229dc26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/114868263071572266", "content": "", "creation_timestamp": "2025-07-17T11:09:56.556926Z"}, {"uuid": "bf36e9ef-960d-45e7-89cd-75fb0f96d7fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lu5ub4e5ts52", "content": "", "creation_timestamp": "2025-07-17T11:47:39.515346Z"}, {"uuid": "9ad2e72c-a208-48ea-9ecc-9d002f6b6b43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lu5upx42nb2a", "content": "", "creation_timestamp": "2025-07-17T11:54:27.525845Z"}, {"uuid": "dfd802bc-1950-4f0f-b0fe-d5eb25e70b27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lu5uvgyy4r2p", "content": "", "creation_timestamp": "2025-07-17T11:57:32.107264Z"}, {"uuid": "f2699c16-5254-427e-a576-f0210ba70f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/114868597270782711", "content": "", "creation_timestamp": "2025-07-17T12:34:56.052324Z"}, {"uuid": "bd79c2ef-991a-462a-85e9-5a6009a00807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3lu5wyktsx22r", "content": "", "creation_timestamp": "2025-07-17T12:35:05.975443Z"}, {"uuid": "b0f95c20-0bd2-4a21-a8bf-a99c1e24ec38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lu5y7x25v32i", "content": "", "creation_timestamp": "2025-07-17T12:57:05.953100Z"}, {"uuid": "4896e43b-4652-4343-ba2b-0ae89c89e9dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lu6b6e72jc2e", "content": "", "creation_timestamp": "2025-07-17T15:37:21.534688Z"}, {"uuid": "13b7e9f1-6c6f-42ac-8201-98174cae5f37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3lu6c3uljzq2s", "content": "", "creation_timestamp": "2025-07-17T15:53:45.794211Z"}, {"uuid": "6fb8e072-ea71-4555-b18b-b4128046b2eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/cosmicmeta.bsky.social/post/3lu6ca2ajsy2q", "content": "", "creation_timestamp": "2025-07-17T15:56:08.322210Z"}, {"uuid": "15a83ad4-e585-4166-9a9f-ca33306df635", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lu6dum6wyn2z", "content": "", "creation_timestamp": "2025-07-17T16:25:30.516919Z"}, {"uuid": "1ae73f43-0cfc-4c6b-8a51-b911ac0fc104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-20337", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lu6e675f3uw2", "content": "", "creation_timestamp": "2025-07-17T16:31:25.648812Z"}, {"uuid": "c602dbfe-62e2-4965-81bc-c5f0af609b61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lu6hr6uq4a2n", "content": "", "creation_timestamp": "2025-07-17T17:35:10.836967Z"}, {"uuid": "3b9576d6-3294-4582-80cb-ff81f9b95002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lu6q5qvznr2i", "content": "", "creation_timestamp": "2025-07-17T20:05:21.382979Z"}, {"uuid": "9a2f498f-65e4-4ed2-9550-3c1fda70fc03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/114870461216524586", "content": "", "creation_timestamp": "2025-07-17T20:28:58.785956Z"}, {"uuid": "75e624b6-f8e5-4cc9-93f1-8c7bad92d043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lu6uhvwg562l", "content": "", "creation_timestamp": "2025-07-17T21:22:37.818316Z"}, {"uuid": "ae4058ce-81b9-43ad-bb86-33ea183d1d3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-607/", "content": "", "creation_timestamp": "2025-07-17T03:00:00.000000Z"}, {"uuid": "8f460056-f843-4f42-8b95-da02df346324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0204", "content": "", "creation_timestamp": "2025-07-17T15:33:07.000000Z"}, {"uuid": "1ae4ef87-1546-47bd-ab82-302ac7469c1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-68e08468-847737c6adef6f88", "content": "", "creation_timestamp": "2025-07-18T05:51:58.637688Z"}, {"uuid": "f8f93160-6100-4b80-a0d4-0fc08ea6579b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-20337", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lua2nhe3kpd2", "content": "", "creation_timestamp": "2025-07-18T08:47:43.209783Z"}, {"uuid": "e4c4f8d3-a233-48dc-8d0b-c57d08024089", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lua3hfbwmb2c", "content": "", "creation_timestamp": "2025-07-18T09:00:15.546726Z"}, {"uuid": "1f56b13b-f1d2-4a44-b06e-5886bbbb5d25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lua3svs7lc2a", "content": "", "creation_timestamp": "2025-07-18T09:06:42.066650Z"}, {"uuid": "30bdae34-9d17-49ff-b16e-0b190fb272ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-20337", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3luadbkojsf2n", "content": "", "creation_timestamp": "2025-07-18T11:20:09.851654Z"}, {"uuid": "be709d52-e136-4af2-95d8-175177231394", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3luadko2x652x", "content": "", "creation_timestamp": "2025-07-18T11:25:15.717066Z"}, {"uuid": "21c13038-02f9-4567-a0b1-b81d0087294a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/114874267274854184", "content": "", "creation_timestamp": "2025-07-18T12:36:53.492683Z"}, {"uuid": "db1769b1-5587-46d2-8b68-9ba89bb1bae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3luahkynovc2v", "content": "", "creation_timestamp": "2025-07-18T12:37:06.048859Z"}, {"uuid": "ec6b322b-4e05-4596-95b5-c3bcb45c3c67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/calimegai.bsky.social/post/3luasxgor7x2y", "content": "", "creation_timestamp": "2025-07-18T16:00:50.687238Z"}, {"uuid": "caf4d9ff-074b-4048-8472-85665c4f6a9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3luav6nizhk2a", "content": "", "creation_timestamp": "2025-07-18T16:40:39.605355Z"}, {"uuid": "52d2074d-56f1-4b4a-a77b-bc46b57037fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lubvq2fulb2h", "content": "", "creation_timestamp": "2025-07-19T02:23:07.618534Z"}, {"uuid": "344cd6c9-996a-4972-85e5-f24fa365d725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-20337", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3ludxj5kdjv2b", "content": "", "creation_timestamp": "2025-07-19T22:00:18.647278Z"}, {"uuid": "aff8732b-b45c-46c1-bc45-32fcc48792b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lugcv4lzhk2b", "content": "", "creation_timestamp": "2025-07-20T20:29:11.843467Z"}, {"uuid": "612d948d-0727-4ca9-be7b-52989269d39f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3luhzdv277c2k", "content": "", "creation_timestamp": "2025-07-21T12:43:53.455790Z"}, {"uuid": "e597224b-88f5-41ca-ac98-1483b69e112e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lui2szhq7c2k", "content": "", "creation_timestamp": "2025-07-21T13:10:11.816269Z"}, {"uuid": "26c1b785-f88a-4fa1-ac1b-f97017151ffa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lui3i7f3pc2k", "content": "", "creation_timestamp": "2025-07-21T13:22:04.738214Z"}, {"uuid": "c856ee9c-7c07-480d-bf03-55d698c0a5b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lui4d5tyqk2k", "content": "", "creation_timestamp": "2025-07-21T13:37:09.022451Z"}, {"uuid": "1e14add1-a5d6-49fe-8676-924c25467bb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/ha3ks.com/post/3luilgtqdac2w", "content": "", "creation_timestamp": "2025-07-21T18:07:35.473545Z"}, {"uuid": "38c49d93-be5d-43cd-b237-61ed359037fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lukthnrqtk26", "content": "", "creation_timestamp": "2025-07-22T15:36:36.232975Z"}, {"uuid": "7e9f0ec7-421d-4d24-b773-09e69320e372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://infosec.exchange/users/Opalsec/statuses/114899134990644269", "content": "", "creation_timestamp": "2025-07-22T22:02:30.119498Z"}, {"uuid": "55184241-44f5-49df-a302-5d80d16bfc35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-ddae93d2-2612a98c6137f85b", "content": "", "creation_timestamp": "2025-07-23T08:18:00.829500Z"}, {"uuid": "d3c1eeaf-4696-4187-9e78-eb3d5b47c25c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/yokoi.bsky.social/post/3m5hqjo4bic2g", "content": "", "creation_timestamp": "2025-11-12T22:52:46.930116Z"}, {"uuid": "c132747c-26cc-4773-80d3-bffc05aff6e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0204", "content": "", "creation_timestamp": "2025-07-23T05:46:25.000000Z"}, {"uuid": "ab22dc28-ef7b-463b-9dc2-198194b62adc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3m5hqxptcz72t", "content": "", "creation_timestamp": "2025-11-12T23:00:35.074008Z"}, {"uuid": "b103bc6e-5b04-46c3-baf4-1c106d76ff0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lupmrisvh225", "content": "", "creation_timestamp": "2025-07-24T13:20:08.723354Z"}, {"uuid": "be59d053-8c5a-4b33-8807-a7c14b1e2d5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3luqgm5ax7s2x", "content": "", "creation_timestamp": "2025-07-24T21:02:23.956471Z"}, {"uuid": "ff1f10dd-5208-42c7-b1ba-2b19346c120a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114914882260692675", "content": "", "creation_timestamp": "2025-07-25T16:45:49.734573Z"}, {"uuid": "d3aea537-d1e7-494f-9b15-a0e185ef2af5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://www.thezdi.com/blog/2025/7/24/cve-2025-20281-cisco-ise-api-unauthenticated-remote-code-execution-vulnerability", "content": "", "creation_timestamp": "2025-07-25T14:30:00.000000Z"}, {"uuid": "9e947684-0e5c-4b9d-a8fb-4e0b19f09589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3luzxxo34xw2d", "content": "", "creation_timestamp": "2025-07-28T16:06:59.935126Z"}, {"uuid": "418bb415-dd0b-40bf-ab9e-56bdba758585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lv36rter3k2r", "content": "", "creation_timestamp": "2025-07-29T03:41:41.732402Z"}, {"uuid": "7dd82908-24b7-41c0-96aa-1d187f3ea1f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3lv3m53gwe22c", "content": "", "creation_timestamp": "2025-07-29T07:40:42.043590Z"}, {"uuid": "e6d32178-bc3a-42d2-bbb5-da4f0fab7157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lv3rkwppf22n", "content": "", "creation_timestamp": "2025-07-29T09:17:50.530861Z"}, {"uuid": "944ccfa1-a2ef-46af-bf9f-c84e5e8f5a33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://threatintel.cc/2025/07/29/cyber-threat-intelligence-report-jul.html", "content": "", "creation_timestamp": "2025-07-29T11:11:38.000000Z"}, {"uuid": "ee283157-77f5-4ec8-87dc-ac60158a5018", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lv4w7enbss2o", "content": "", "creation_timestamp": "2025-07-29T20:13:31.103139Z"}, {"uuid": "e94b1228-f89b-4721-879a-ee3b4d1a856e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lv4ywrohtx2a", "content": "", "creation_timestamp": "2025-07-29T21:02:25.734451Z"}, {"uuid": "326a2cd4-d461-474e-b062-c95e2ce23746", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lv5l47mb3z2i", "content": "", "creation_timestamp": "2025-07-30T02:27:33.905714Z"}, {"uuid": "0019deac-6d9c-4066-b7d4-419d0ea15093", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://www.darkreading.com/vulnerabilities-threats/citrixbleed-2-cisco-zero-day-bugs", "content": "", "creation_timestamp": "2025-11-12T21:30:39.000000Z"}, {"uuid": "3b422205-5236-4ced-981d-5379d88f0c0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lvmcigzqs22m", "content": "", "creation_timestamp": "2025-08-04T23:03:18.945268Z"}, {"uuid": "c75f043f-00d2-4c10-ba4f-556059e94b62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-28T08:23:31.000000Z"}, {"uuid": "074be024-4ec7-48e2-9cc2-dca3d2206e5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/115540509167771970", "content": "", "creation_timestamp": "2025-11-13T04:30:58.101696Z"}, {"uuid": "de79959f-37f9-4aa3-bfb0-e758a6f2f051", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m5imxn7ihs25", "content": "", "creation_timestamp": "2025-11-13T07:21:38.140935Z"}, {"uuid": "e2307758-07bb-4c1d-bd0d-5827366791de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-29T03:12:15.000000Z"}, {"uuid": "11c18171-2dc4-4eb8-b148-abf76145e118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://threatintel.cc/2025/11/12/hackers-exploited-citrix-cisco-ise.html", "content": "", "creation_timestamp": "2025-11-13T03:31:11.000000Z"}, {"uuid": "38daabe6-b45b-4508-8415-fdd03d178d67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-20337", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5iqjizuojf2", "content": "", "creation_timestamp": "2025-11-13T08:26:07.369708Z"}, {"uuid": "5872f5ba-9ac2-4263-a0d0-28ddc3cd63c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3m5kwojvirs2k", "content": "", "creation_timestamp": "2025-11-14T05:21:08.155891Z"}, {"uuid": "f8b3f462-060b-4610-b9e8-b2992005a99d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/guardian360.bsky.social/post/3m5l5vm3yh22x", "content": "", "creation_timestamp": "2025-11-14T07:30:02.143392Z"}, {"uuid": "c0ce5620-88cf-478c-9cf1-30237c34482c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/115541929758998892", "content": "", "creation_timestamp": "2025-11-13T10:32:15.729524Z"}, {"uuid": "0a6bc7c1-2f47-442e-805a-85ac193b2647", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-188ae7d3-f883ce80381569e0", "content": "", "creation_timestamp": "2025-11-13T12:59:21.454087Z"}, {"uuid": "01949fbc-b604-4549-8579-39ac6c4c438e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://gist.github.com/Darkcrai86/6953150e43f04d6f29328cae8359241e", "content": "", "creation_timestamp": "2025-11-12T14:49:37.000000Z"}, {"uuid": "ae86f2af-c350-4c0e-a7b3-3b14f35e2a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3m5h2dipa422f", "content": "", "creation_timestamp": "2025-11-12T16:15:37.254091Z"}, {"uuid": "96ba1eff-bf37-4bbc-ba0a-9ba82845e60b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3m5h2dksw4k2f", "content": "", "creation_timestamp": "2025-11-12T16:15:37.887496Z"}, {"uuid": "f3e5d5e1-bf4c-4607-b8d8-e5ec85fd8cec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3m5h2dksx3s2f", "content": "", "creation_timestamp": "2025-11-12T16:15:38.494265Z"}, {"uuid": "d37d9537-b56f-4e4b-9baa-6667ae2206cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3m5h3fmpl5z2e", "content": "", "creation_timestamp": "2025-11-12T16:34:39.780170Z"}, {"uuid": "0adee1af-899b-4f62-bb46-e6390f75033a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/115538607546193786", "content": "", "creation_timestamp": "2025-11-12T20:27:22.033268Z"}, {"uuid": "95bdac83-ed60-4e6a-9af0-45275e5f086b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3m5hig4en672d", "content": "", "creation_timestamp": "2025-11-12T20:27:34.074441Z"}, {"uuid": "74c7634a-2e1c-45b2-8e7f-40c2cd29b30f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/3b6bbd4e-9be5-48b3-8a2d-10b2b5f5da17", "content": "", "creation_timestamp": "2025-11-13T08:59:31.554100Z"}, {"uuid": "74365973-de89-49e7-b998-50ae0fc5a6d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1579", "content": "", "creation_timestamp": "2025-06-26T04:00:00.000000Z"}, {"uuid": "1f6f435d-ee83-41d2-8c47-da8ff3ca57a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-20337", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/862cfce1-11f6-4946-916c-badb313f92f3", "content": "", "creation_timestamp": "2026-02-02T12:25:55.777008Z"}, {"uuid": "649af47a-8519-41bf-b124-5994ac7a6dc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "exploited", "source": "https://t.me/thehackernews/7239", "content": "\ud83d\udea8 Update: CISA just added CVE-2025-20281 and CVE-2025-20337 to its Known Exploited Vulnerabilities list.\n\nThese Cisco ISE flaws allow remote, unauthenticated attackers to gain root access \u2014 and they're already being exploited.\n\nFeds must patch by Aug 18.\nEveryone else: don\u2019t wait.\n\nRead \u2192 https://thehackernews.com/2025/07/cisco-confirms-active-exploits.html", "creation_timestamp": "2025-07-28T16:01:17.000000Z"}, {"uuid": "d6171647-f9e9-4935-9c66-7191f2a46134", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "published-proof-of-concept", "source": "Telegram/Q-s80O6b5uVlmhryR8-ZciI2tLabDBtdKOXSX3QDtGfzYSw", "content": "", "creation_timestamp": "2025-11-13T21:00:05.000000Z"}, {"uuid": "a1847060-f617-4929-8497-ac71500b2d19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "Telegram/HaLl9WoJEN--0XTEVXWgfygUw8CGnTm8gMV0noCLDEXVVw", "content": "", "creation_timestamp": "2025-07-17T11:05:37.000000Z"}, {"uuid": "12226fb2-4603-4564-802c-988e9b2e996c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "exploited", "source": "https://t.me/information_security_channel/54447", "content": "Cisco ISE, CitrixBleed 2 Vulnerabilities Exploited as Zero-Days: Amazon\nhttps://www.securityweek.com/cisco-ise-citrixbleed-2-vulnerabilities-exploited-as-zero-days-amazon/\n\nAmazon has seen a threat actor exploiting CVE-2025-20337 and CVE-2025-5777, two critical Cisco and Citrix vulnerabilities, as zero-days.\nThe post Cisco ISE, CitrixBleed 2 Vulnerabilities Exploited as Zero-Days: Amazon (https://www.securityweek.com/cisco-ise-citrixbleed-2-vulnerabilities-exploited-as-zero-days-amazon/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2025-11-13T10:18:29.000000Z"}, {"uuid": "38481edf-1637-4532-a4a7-7f66c3a6c786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/59574", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-20337\nURL\uff1ahttps://github.com/B1ack4sh/Blackash-CVE-2025-20337\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-11-13T15:55:06.000000Z"}, {"uuid": "d2b0f1d2-06e3-4ca7-a61b-cfb15e1dc979", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "exploited", "source": "https://t.me/BleepingComputer/23390", "content": "\u200aHackers exploited Citrix, Cisco ISE flaws in zero-day attacks\n\nAn advanced threat actor exploited the critical vulnerabilities \"Citrix Bleed 2\" (CVE-2025-5777) in NetScaler ADC and Gateway, and\u00a0CVE-2025-20337 affecting\u00a0Cisco Identity Service Engine (ISE) as zero-days to deploy custom malware. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploited-citrix-cisco-ise-flaws-in-zero-day-attacks/", "creation_timestamp": "2025-11-12T15:01:00.000000Z"}, {"uuid": "891890a4-f3af-4a48-ba8d-61968dff6f82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "exploited", "source": "https://t.me/xakep_ru/18484", "content": "\u0425\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438 0-day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Citrix \u0438 Cisco ISE \u0432 \u0441\u0432\u043e\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Amazon Threat Intelligence \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0432\u0443\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 0-day \u2014 CVE-2025-5777 (Citrix Bleed 2) \u0432 NetScaler ADC/Gateway \u0438 CVE-2025-20337 \u0432 Cisco Identity Service Engine (ISE). \u041e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u044d\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u0435\u0449\u0435 \u0434\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043d\u0438\u0445 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447\u0438.\n\nhttps://xakep.ru/2025/11/13/0days-undet-attacks/", "creation_timestamp": "2025-11-13T19:34:07.000000Z"}, {"uuid": "2eb6d6c2-6c38-4c52-8d78-efa8bfd5c109", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "published-proof-of-concept", "source": "https://t.me/ics_cert/1244", "content": "\u06a9\u0634\u0641 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 API \u0645\u0648\u062a\u0648\u0631 \u062e\u062f\u0645\u0627\u062a \u0647\u0648\u06cc\u062a \u0633\u06cc\u0633\u06a9\u0648 (ISE) \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0639\u062f\u0645 \u0627\u0646\u062c\u0627\u0645 \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u0644\u0627\u0632\u0645 \u0628\u0631\u0627\u06cc \u062e\u0646\u062b\u06cc\u200c\u0633\u0627\u0632\u06cc \u0639\u0646\u0627\u0635\u0631 \u0648\u06cc\u0698\u0647 \u0627\u06cc\u062c\u0627\u062f \u0634\u062f\u0647 \u0627\u0633\u062a.\n \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a API \u062e\u0627\u0635\u060c \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632\u0627\u062a \u0631\u06cc\u0634\u0647 \u0627\u062c\u0631\u0627 \u06a9\u0646\u062f.\n\n\nBDU:2025-08631\nCVE-2025-20337\n\n\u0646\u0635\u0628 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627 \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0645\u0639\u062a\u0628\u0631.\u060c \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u062a\u0646\u0647\u0627 \u067e\u0633 \u0627\u0632 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u062a\u0645\u0627\u0645 \u062e\u0637\u0631\u0627\u062a \u0645\u0631\u062a\u0628\u0637 \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.\n\n\n\u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644\u200c\u0647\u0627 \u0628\u0631\u0627\u06cc \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0647 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u061b\n- \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0637\u0631\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \"\u0644\u06cc\u0633\u062a \u0633\u0641\u06cc\u062f\"\u061b\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0622\u0646\u062a\u06cc\u200c\u0648\u06cc\u0631\u0648\u0633 \u0628\u0631\u0627\u06cc \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0627\u0632 \u062a\u0644\u0627\u0634 \u0628\u0631\u0627\u06cc \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u061b\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u062a\u0634\u062e\u06cc\u0635 \u0648 \u067e\u06cc\u0634\u06af\u06cc\u0631\u06cc \u0627\u0632 \u0646\u0641\u0648\u0630 \u0628\u0631\u0627\u06cc \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc (\u0634\u0646\u0627\u0633\u0627\u06cc\u06cc\u060c \u062b\u0628\u062a) \u0648 \u067e\u0627\u0633\u062e \u0628\u0647 \u062a\u0644\u0627\u0634\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0628\u0631\u0627\u06cc \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0627\u0646\u062c\u0627\u0645 \u0645\u06cc\u200c\u0634\u0648\u062f.\n\n\n\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062a\u0648\u0635\u06cc\u0647\u200c\u0647\u0627:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-unauth-rce-ZAd2GnJ6\n\ud83c\udfed \u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n \u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2", "creation_timestamp": "2025-07-18T20:53:21.000000Z"}, {"uuid": "0e56261c-4e72-4321-aebc-32f007b217e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "published-proof-of-concept", "source": "https://t.me/SpiderCodeCommunity1/351", "content": "\ud83d\udea8 CVE Thursday: Critical Cisco RCE Vulnerability Exploit \ud83d\ude2e\n\n\ud83d\udcc5 Date: July 17, 2025\n\ud83c\udd94 CVE: CVE-2025-20337\n\ud83c\udfaf Impact Rating: 10/10 (Critical)\n\ud83d\udd12 Vulnerability Type: Unauthenticated Remote Code Execution (RCE)\n\n\n---\n\n\ud83d\udc4b Welcome, dear readers, to another episode of CVE Thursday!\n\nToday\u2019s CVE is a BIG ONE \u2013 a critical vulnerability discovered in Cisco\u2019s Identity Services Engine (ISE) that can allow an attacker to gain full root access to systems, without any login or authentication required \ud83d\ude33\n\n\n---\n\n\ud83e\udde0 What is CVE?\n\nA CVE (Common Vulnerabilities and Exposures) is a publicly disclosed cybersecurity flaw. Each CVE is assigned a severity rating out of 10, with 10 being the most dangerous.\n\nAnd today\u2019s CVE? Yep... it\u2019s 10/10 \ud83d\ude31\n\n\n---\n\n\ud83d\udd75\ufe0f\u200d\u2642\ufe0f Quick Breakdown\n\nField Info\n\nCVE ID CVE-2025-20337\nDiscovery Date July 11, 2025\nDisclosure Date July 17, 2025\nVendor Cisco\nProduct Affected Cisco ISE &amp; ISE-PIC\nSeverity 10.0 (Critical)\nAttack Type Remote Code Execution (RCE)\nAuthentication Needed None (Unauthenticated)\nImpact Full root access to system\nDiscovered By Kentaro Kawane (via Trend Micro ZDI)\n\n\n\n---\n\n\ud83d\udee0\ufe0f How Does It Work?\n\nThis vulnerability lies in a poorly protected internal API inside Cisco ISE. The attacker can exploit this endpoint by sending maliciously crafted HTTP requests that bypass any authentication and execute commands directly on the system \u2014 as root. \ud83d\ude2c\n\n&gt; The root cause? Improper input validation (CWE-74)\nBasically, the system doesn\u2019t sanitize inputs well enough, so an attacker can inject code and gain access.\n\n\n\n\n---\n\n\ud83d\udca5 Affected Versions\n\nMake sure your systems aren't vulnerable!\n\n\ud83d\udeab Vulnerable:\n\nCisco ISE 3.3 (before Patch 7)\n\nCisco ISE 3.4 (before Patch 2)\n\n\n\u2705 Safe:\n\nCisco ISE 3.3 Patch 7\n\nCisco ISE 3.4 Patch 2\n\n\nIf you haven\u2019t updated \u2014 do it now!\n\n\n---\n\n\u26a0\ufe0f Risk Summary\n\nIf exploited, an attacker can:\n\nRun arbitrary system commands\n\nCompromise sensitive data\n\nMove laterally in the network\n\nCompletely own the affected Cisco device\n\n\nAnd the worst part? They don\u2019t need a username or password.\n\n\n---\n\n\ud83e\uddef Mitigation &amp; Fix\n\nPatch Immediately. Cisco has released updates addressing this vulnerability:\n\nDownload the latest patch from Cisco\u2019s official security advisory:\n\ud83d\udd17 Cisco Advisory \u2013 CVE-2025-20337\n\n\nAlso:\n\nRestrict access to internal APIs (never expose to the internet)\n\nMonitor for suspicious traffic to ISE endpoints\n\nApply network segmentation\n\n\n\n---\n\n\u2705 Final Thoughts\n\nThis is one of those \"drop everything and patch now\" vulnerabilities. If your organization uses Cisco ISE, you should be auditing, patching, and checking logs immediately.\n\nStay safe, and see you next Thursday for another CVE deep dive!\nIf you enjoyed this breakdown \u2014 let us know! \u2764\ufe0f", "creation_timestamp": "2025-07-17T18:10:28.000000Z"}, {"uuid": "bd5b307d-3544-4b9e-a4b2-0959fb1d814f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://t.me/SpiderCodeCommunity1/350", "content": "\u0642\u0646\u0627\u0647 \u0627\u062e\u0628\u0627\u0631\u064a\u0647 \u0646\u0632\u0644\u062a \u062e\u0628\u0631 \u0639\u0646 \u0627\u062e\u062a\u0631\u0627\u0642 Cisco \u0627\u0644\u0646\u0647\u0627\u0631\u062f\u0647 \ud83d\ude2e\n\n-----------------------------------------------------------------\n\n\u0627\u0647\u0644\u0627 \u0648\u0633\u0647\u0644\u0627 \u0628\u064a\u0643 \u064a\u0639\u0632\u064a\u0632\u064a \u0627\u0644\u0642\u0631\u0627\u0621 \u0641\u064a CVE \u0627\u0644\u062e\u0645\u064a\u0633 \ud83e\udd29\n\n\n\u0641\u064a \u062a\u0627\u0631\u064a\u062e : \n\n{ 2025/7/17 }\n\n\u062a\u0645 \u062d\u062f\u0648\u062b ( CVE-2025-20337 )\n\n\n-----------------------------------------------------------------\n\u0637\u064a\u0628 \u0627\u064a \u0627\u0644\u0640 CVE \u062f\u0627 \u061f\n\n\u0628\u062e\u062a\u0635\u0627\u0631 \u064a\u0639\u0632\u064a\u0632\u064a \u0627\u0644\u0640 CVE \u062f\u0627 \u0628\u064a\u0643\u0648\u0646 \u062b\u063a\u0631\u0627\u062a \u062a\u0645 \u062a\u0633\u062c\u064a\u0644\u0647 \u0648 \u0628\u062a\u0643\u0648\u0646 \u0645\u0631\u062a\u0628\u0647 \u062f\u0631\u062c\u0647 \u0627\u0644\u062e\u0637\u0648\u0631\u0647 \u0645\u0646 \u0627\u0639\u0644\u064a \u062f\u0631\u062c\u0647 \u0644\u064a \u062d\u062f CVE \u062e\u0641\u064a\u0641 \u062e\u0637\u0648\u0631\u0647 \u0645\u0634 \u0636\u0627\u0631\u0647\n\n-----------------------------------------------------------------\n\n\n\u0627\u0644\u0645\u0647\u0645 \u0646\u0631\u062c\u0639 \u0644\u064a \u0645\u0648\u0636\u0648\u0639\u0646\u0627 \ud83d\ude01\n\n\n\u0637\u064a\u0628 \u0627\u064a \u062a\u0642\u064a\u0645 \u0627\u0644\u062b\u063a\u0631\u0647 \u0645\u0646 10 \u061f\n\n10/10 \ud83d\ude2e\n\n\u0637\u064a\u0628 \u062a\u0645 \u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062b\u063a\u0631\u0647 \u0627\u0645\u062a\u0627 \u061f\n\n{ 2025/7/11 }\n\n\u0637\u064a\u0628 \u0645\u064a\u0646 \u0627\u0636\u0631 \u0641\u064a \u0627\u0644\u062b\u063a\u0631\u0647 \u062f\u064a \u061f\n\nCisco Identity Services Engine (ISE) \n\n\u0648 ISE-PIC\n\n\u0627\u0643\u062a\u0634\u0641\u0648 \u0648\u062c\u0648\u062f \n\nUnauthenticated Remote Code Execution (RCE) \n\n\u0628\u062e\u0635\u062a\u0627\u0631 \u0627\u0644\u0647\u062c\u0648\u0645 \u0645\u0634 \u0628\u064a\u062d\u062a\u0627\u062c \u0627\u0646\u0643 \u062a\u0633\u062c\u0644 \u0641\u064a Unauthenticated \u0627\u0644\u064a \u0647\u064a\u0627 \u0628\u0644 \u0639\u0631\u0628\u064a \u0645\u0635\u0627\u062f\u0642\u0647 \u0627\u0644\u062b\u0646\u0627\u0626\u064a\u0647\n\n\u0637\u064a\u0628 \u0627\u064a \u0627\u0644\u0640 impact \u0627\u0648 \u0627\u0644\u062a\u0627\u062b\u064a\u0631 \u061f\n\n\u0627\u0646 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u064a\u0642\u062f\u0631 \u064a\u0643\u0648\u0646 \u0645\u0633\u062a\u062e\u062f\u0645 root \u0639\u0644\u064a \u0633\u064a\u0631\u0641\u0631 \u0645\u0646 cisco \n\n\u0637\u064a\u0628 \u062a\u0645\u062a \u0627\u0632\u0627\u064a \u061f\n\n\u0639\u0646 \u0637\u0631\u064a\u0642 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0648\u0627\u062c\u0647\u0629 API \u063a\u064a\u0631 \u0645\u062d\u0645\u064a\u0629 \u0641\u064a ISE\n\n\u0645\u064a\u0646 \u0627\u0644\u064a \u0627\u0643\u062a\u0634\u0641 \u0627\u0644\u062b\u063a\u0631\u0647 \u061f\n\nKentaro Kawane\n\n\u0637\u064a\u0628 \u0627\u064a \u0644\u0627\u0635\u062f\u0631\u0627\u062a \u0627\u0644\u064a \u064a\u062a\u0645 \u062d\u062f\u0648\u062b \u0627\u0644\u062b\u063a\u0631\u0647 \u0641\u064a\u0647\u0627 \u061f\n\nCisco ISE 3.3 \u0642\u0628\u0644 Patch 7\n\nCisco ISE 3.4 \u0642\u0628\u0644 Patch 2 ( \u062a\u0645 \u0627\u0635\u0644\u0627\u062d \u0645\u0634\u0643\u0644\u0647 \u0641\u064a \u062a\u062d\u062f\u064a\u062b \u0627\u0644\u062c\u062f\u064a\u062f )\n\nCisco ISE 3.3 Patch 7\n\nCisco ISE 3.4 Patch 2 \n\n\n\u0637\u064a\u0628 \u0643\u0644 \u062f\u0627 \u0643\u0627\u0646 \u0645\u0642\u062f\u0645\u0647 \u0646\u062a\u0643\u0644\u0645 \u0639\u0646 \u062b\u063a\u0631\u0647 \u0628\u0634\u0643\u0644 \u062a\u0641\u0635\u064a\u0644\u064a  \ud83d\ude01\n\n\u0641\u064a \u062a\u0627\u0631\u064a\u062e :\n{ 2025/7/16 }\n\n\u062a\u0645 \u0627\u0633\u062a\u0644\u0627\u0645 \u0627\u0644\u062a\u0642\u0631\u064a\u0631 \u0645\u0646 Cisco \u0627\u0644\u064a NVD \u0628\u0630\u0643\u0631 \u062a\u0641\u0627\u0635\u064a\u0644 \u0627\u0644\u062b\u063a\u0631\u0629 \u0648\u062a\u0642\u064a\u064a\u0645\u0647\u0627 \u0628\u0646\u0642\u0627\u0637 CVSS 10.0  \n\n\n\u0648\n\n17 \u064a\u0648\u0644\u064a\u0648 2025: Cisco \u0646\u0634\u0631\u062a advisory \u0631\u0633\u0645\u064a\u0629 \u0648\u062a\u063a\u0637\u064a\u0629 \u0625\u0639\u0644\u0627\u0645\u064a\u0629 \u0648\u0635\u062d\u064a\u0641\u0629 \u062d\u0648\u0644 \u0627\u0644\u062b\u063a\u0631\u0629  \n\n\n\u0637\u064a\u0628 \u0627\u0632\u0627\u064a \u0627\u0644\u062b\u063a\u0631\u0647 \u0628\u062a\u062d\u0635\u0644 \u061f\n\n\u062e\u0637\u0623 \u0641\u064a \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0635\u062d\u0629 \u0627\u0644\u0645\u062f\u062e\u0644\u0627\u062a (insufficient input validation) \u0641\u064a \u0648\u0627\u062c\u0647\u0629 API \u062e\u0627\u0635\u0629 \u062d\u064a\u062b \u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0625\u0631\u0633\u0627\u0644 \u0637\u0644\u0628 HTTP \u0645\u064f\u0635\u0645\u0651\u0645 \u0628\u0637\u0631\u064a\u0642\u0629 \u062e\u0628\u064a\u062b\u0629 \u0644\u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 \u0639\u0644\u0649 \u0646\u0638\u0627\u0645 \u0627\u0644\u062a\u0634\u063a\u064a\u0644 \u2014 \u0628\u0627\u0644\u0643\u0627\u0645\u0644 \u0628\u0635\u0644\u0627\u062d\u064a\u0627\u062a root \u0628\u062f\u0648\u0646 \u0645\u0635\u0627\u062f\u0642\u0629 \u0623\u0648 \u062a\u0641\u0627\u0639\u0644 \u0645\u0646 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645  \n\n\u064a\u064f\u0635\u0646\u0641 \u062a\u062d\u062a\n\n CWE\u201174: Improper Neutralization of Special Elements in Output\n\n\n\u0648 \u0633\u0628\u0628 \u0638\u0647\u0648\u0631\u0647 \u0643\u0627\u0646 injection \u0641\u064a \u0627\u0644\u062f\u0627\u062a\u0627 \u0627\u0644\u062e\u0627\u0635\u0647\n\n\u0634\u0643\u0631\u0627 \u0639\u0644\u064a \u0642\u0631\u0627\u0626\u0647 \u0627\u0644\u0645\u0642\u0627\u0644 \u0644\u0648 \u062d\u0628\u064a\u062a\u0648 \u0633\u0644\u0633\u0644\u0647 CVE \u0627\u0644\u062e\u0645\u064a\u0633 \u0642\u0648\u0644\u0648 \u0631\u0627\u064a\u0643\u0645 \u0641\u064a\u0647\u0627 \ud83e\udd0d", "creation_timestamp": "2025-07-17T14:47:19.000000Z"}, {"uuid": "584221eb-f610-4b2b-84ac-960911a0e998", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://t.me/BleepingComputer/22548", "content": "\u200aMax severity Cisco ISE bug allows pre-auth command execution, patch now\n\nA critical\u00a0vulnerability (CVE-2025-20337) in Cisco's\u00a0Identity Services Engine (ISE) could be exploited to let an unauthenticated attacker\u00a0store malicious files, execute arbitrary code, or gain root privileges on vulnerable devices. [...]\n\nhttps://www.bleepingcomputer.com/news/security/max-severity-cisco-ise-bug-allows-pre-auth-command-execution-patch-now/", "creation_timestamp": "2025-07-17T16:06:53.000000Z"}, {"uuid": "96dc2275-8940-4507-9080-9836afd0cdaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "exploited", "source": "https://t.me/true_secator/7276", "content": "\u0410\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Cisco Identity Services Engine (ISE) \u0442\u0435\u043f\u0435\u0440\u044c \u043e\u0431\u0437\u0430\u0432\u0435\u043b\u0430\u0441\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0441\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0411\u043e\u0431\u0431\u0438 \u0413\u0443\u043b\u0434.\n\n\u041e\u043d\u0430 \u0431\u044b\u043b\u0430\u00a0\u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 25 \u0438\u044e\u043d\u044f 2025 \u0433\u043e\u0434\u0430 \u0438 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 ISE \u0438 ISE-PIC 3.3 \u0438 3.4, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0446\u0435\u043b\u0435\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0438\u0445 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u043c\u0435\u0442\u043e\u0434\u0435 enableStrongSwanTunnel().\n\n\u0422\u0440\u0438 \u043d\u0435\u0434\u0435\u043b\u0438 \u0441\u043f\u0443\u0441\u0442\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0434\u043e\u0431\u0430\u0432\u0438\u043b \u0432 \u0442\u043e\u0442 \u0436\u0435 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 CVE-2025-20337, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u0442\u043e\u0439 \u0436\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435, \u043d\u043e \u0442\u0435\u043f\u0435\u0440\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 \u0434\u0432\u0443\u0445 \u0447\u0430\u0441\u0442\u0435\u0439: CVE-2025-20281 (\u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b) \u0438 CVE-2025-20337 (\u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f).\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0440\u0430\u043d\u0435\u0435, Cisco \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 3.3 Patch 7 \u0438 3.4 Patch 2 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0431\u0435\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n22 \u0438\u044e\u043b\u044f 2025 \u0433\u043e\u0434\u0430 Cisco \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 CVE-2025-20281 \u0438 CVE-2025-20337 \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0412 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0432 \u043f\u043e\u043b\u043a\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445 \u044f\u0432\u043d\u043e \u043f\u0440\u0438\u0431\u0430\u0432\u0438\u0442\u044c\u0441\u044f, \u0432\u0435\u0434\u044c 25 \u0438\u044e\u043b\u044f \u0413\u0443\u043b\u0434 \u0432\u044b\u043a\u0430\u0442\u0438\u043b \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044f \u0437\u0430\u043f\u0443\u0441\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 Cisco ISE \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 Java String[].\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0434\u043e\u0431\u0438\u043b\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root \u0432\u043d\u0443\u0442\u0440\u0438 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 Docker, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 Runtime.exec() Java \u0438 ${IFS} \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0442\u043e\u043a\u0435\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043e\u043d \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u043a\u0430\u043a \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 Docker \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root \u043d\u0430 \u0445\u043e\u0441\u0442-\u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 Linux \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 cgroups \u0438 release_agent.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0434\u043e\u0432\u043e\u0434\u044b \u0413\u0443\u043b\u0434\u0430 \u043d\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0433\u043e\u0442\u043e\u0432\u044b\u043c \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0445\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u043f\u043e\u0437\u0430\u0438\u043c\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0432 \u0441\u0432\u043e\u0438 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0430\u0442\u0430\u043a, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u043e\u0442\u0440\u0430\u0436\u0430\u044e\u0442 \u0432\u0441\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u0443\u0434\u0443\u0442 \u0432\u0435\u0441\u044c\u043c\u0430 \u0432\u043e\u0441\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435\u043c \u0434\u043b\u044f \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0432\u0441\u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430.\n\n\u0421\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u043f\u043e\u044d\u0442\u043e\u043c\u0443\u00a0\u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c\u044b\u043c \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f CVE-2025-20281 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0432\u00a0\u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 Cisco.", "creation_timestamp": "2025-07-30T09:30:49.000000Z"}, {"uuid": "5f56ed90-11a1-44b8-8f67-9c1828384cbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "exploited", "source": "https://t.me/true_secator/7258", "content": "\u041d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Cisco Identity Services Engine (ISE), \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u044b \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438, \u0442\u0435\u043f\u0435\u0440\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0421\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0430 Cisco PSIRT \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430, \u043d\u043e \u043d\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439.\n\n\u041e\u0448\u0438\u0431\u043a\u0438 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u043c 25 \u0438\u044e\u043d\u044f 2025 \u0433. (CVE-2025-20281 \u0438 CVE-2025-20282) \u0438 16 \u0438\u044e\u043b\u044f 2025 \u0433. (CVE-2025-20337):\n\n- CVE-2025-20281: RCE \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Cisco Identity Services Engine (ISE) \u0438 ISE Passive Identity Connector (ISE-PIC). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 API-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0432 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u041e\u0421 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 ISE 3.3 (\u043f\u0430\u0442\u0447 7) \u0438 3.4 (\u043f\u0430\u0442\u0447 2).\n\n- CVE-2025-20282:\u00a0\u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 Cisco ISE \u0438 ISE-PIC \u0432\u0435\u0440\u0441\u0438\u0438 3.4. \u041e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0438\u0445 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 ISE 3.4 (\u043f\u0430\u0442\u0447 2).\n\n- CVE-2025-20337:\u00a0RCE \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Cisco ISE \u0438 ISE-PIC. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b API \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0431\u0435\u0437 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 ISE 3.3 (\u043f\u0430\u0442\u0447 7) \u0438 3.4 (\u043f\u0430\u0442\u0447 2).\n\n\u0412\u0441\u0435 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u043c\u0435\u044e\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 (CVSS: 10,0) \u0438 \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nCisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0434\u0432\u0430 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0430\u0442\u0447\u0430 \u0434\u043b\u044f \u0442\u0440\u0451\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0432\u0438\u0434\u0443 \u0440\u0430\u0437\u043d\u0438\u0446\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0438\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\u0414\u043b\u044f \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432\u0441\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f: \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c ISE 3.3 - \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u0430\u0442\u0447\u0430 7, \u0430 \u0434\u043b\u044f 3.4 - \u0434\u043e \u043f\u0430\u0442\u0447\u0430 2.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c ISE 3.2 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439. \u041e\u0431\u0445\u043e\u0434\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442.\n\n\u0412 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u0440\u0430\u0439\u043d\u0435 \u0432\u0430\u0436\u043d\u043e \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u041f\u041e \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0445 \u0440\u0438\u0441\u043a\u043e\u0432.", "creation_timestamp": "2025-07-22T18:33:36.000000Z"}, {"uuid": "288ea1f0-6abd-46f9-a9d6-0993de3ad4e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://t.me/thehackernews/7172", "content": "\ud83d\udca5 New Cisco ISE flaw lets attackers run code as root \u2014 no login needed.\n\nThe bug (CVE-2025-20337) scores a perfect 10.0. Just one crafted API call = full system takeover.\n\nAffected? Patch now or risk compromise.\n\nDetails here \u2192 https://thehackernews.com/2025/07/cisco-warns-of-critical-ise-flaw.html", "creation_timestamp": "2025-07-17T08:44:42.000000Z"}, {"uuid": "d218a27d-1921-468a-8849-1c3ef05c1d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://t.me/CyberBulletin/3663", "content": "\u26a1\ufe0fCisco Warns of Critical ISE Flaw Allowing Unauthenticated Attackers to Execute Root Code.\n\nTracked as CVE-2025-20337, the shortcoming carries a CVSS score of 10.0 and is similar to CVE-2025-20281, which was patched by the networking equipment major late last month.\n\n#CyberBulletin", "creation_timestamp": "2025-07-18T20:32:05.000000Z"}, {"uuid": "266c3786-5664-4e5a-8bd1-9075e0748c4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "Telegram/v1OJNXhRqdcaA1qmzlSVaCQ9XWia57ghV9lZfuDMUQE-3A", "content": "", "creation_timestamp": "2025-07-17T07:36:47.000000Z"}, {"uuid": "93acf9b9-c3ad-47cd-a7c7-db96932b1a9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "Telegram/-f3F6hhGAyP7t1_B3aHpBL8jI4ACPY8RFkOx4bLBTIoOG5HT", "content": "", "creation_timestamp": "2025-07-17T11:35:04.000000Z"}, {"uuid": "61582534-a42f-45e2-ba28-6b939d54f80a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20337", "type": "seen", "source": "https://t.me/true_secator/7242", "content": "Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 Identity Services Engine (ISE) \u0438 ISE Passive Identity Connector, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430.\n\n\u0421\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u0432\u043d\u0435\u0441\u0435\u043d\u044b \u0432 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044e \u043e\u0442 25 \u0438\u044e\u043d\u044f, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0434\u0432\u0435 \u0442\u0430\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, CVE-2025-20281 \u0438 CVE-2025-20282.\n\n\u0422\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f CVE \u0441 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e \u0435\u0435 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u043c \u0443\u0440\u043e\u0432\u043d\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-20337 \u0438 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 10/10, \u0442\u0430\u043a\u0443\u044e \u0436\u0435, \u043a\u0430\u043a \u0438 \u0434\u0432\u0435 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u043e\u0442 \u0436\u0435 API, \u0447\u0442\u043e \u0438 CVE-2025-20281.\n\n\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 API Cisco ISE \u0438 Cisco ISE-PIC \u043f\u043e\u0437\u0432\u043e\u043b\u044e\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u041e\u0421 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e\u044f\u0441\u043d\u044f\u0435\u0442, \u0447\u0442\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u0444\u0430\u0431\u0440\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 API \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u041e\u0448\u0438\u0431\u043a\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 Cisco ISE \u0438 ISE-PIC \u0432\u0435\u0440\u0441\u0438\u0439 3.3 \u0438 3.4 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 3.3 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 7 \u0438 3.4 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 2.\n\nCisco \u0442\u0430\u043a\u0436\u0435\u00a0\u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430\u00a0\u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-20274 (CVSS 6,3) - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Unified Intelligence Center, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\u041d\u0435\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0444\u0430\u0439\u043b\u043e\u0432, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0445 \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0445\u0440\u0430\u043d\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root, \u0447\u0442\u043e \u043f\u043e\u0432\u044b\u0448\u0430\u0435\u0442 \u0435\u0451 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0441\u0442\u044c.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 Unified Intelligence Center 12.5(1) SU ES05 \u0438 12.6(2) ES05. Cisco \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Unified CCX \u0432\u0435\u0440\u0441\u0438\u0439 12.5(1) SU3 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0432\u0435\u0440\u0441\u0438\u044e 15, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u0430 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0442\u0430\u043a\u0436\u0435 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 ISE \u0438 ISE-PIC, Evolved Programmable Network Manager (EPNM), Prime Infrastructure \u0438 Unified Intelligence Center.\n\nCisco \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.", "creation_timestamp": "2025-07-17T13:41:05.000000Z"}]}