Description
Cisco Identity Services Engine（思科身份服务引擎，简称 ISE）是思科推出的网络访问控制与策略管理平台，为企业提供身份认证、端点合规与准入控制等核心能力，广泛应用于企业园区网络、远程接入与无线接入的安全管理场景。Cisco ISE /admin/files-upload/ 接口存在文件上传漏洞，未认证攻击者可向特权目录上传恶意文件，进而以 root 权限执行任意代码，完全控制受影响设备。
Cisco ISE /admin/files-upload/ 文件上传漏洞（CVE-2025-20282）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-20282
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-ise-unauth-rce-ZAd2GnJ6.html
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-unauth-rce-ZAd2GnJ6
https://www.zerodayinitiative.com/advisories/ZDI-25-608/
https://riversecurity.eu/like-stealing-cisco-ise-cream-from-a-kid-weaponizing-a-cve/
https://sploitus.com/exploit?id=PACKETSTORM:214117
https://secalerts.co/vulnerability/CVE-2025-20282
https://github.com/advisories/GHSA-w8p2-wjjr-hr24
https://www.cvedetails.com/cve/CVE-2025-20282/
https://www.vulmon.com/vulnerabilitydetails?qid=CVE-2025-20282
https://www.rapid7.com/db/vulnerabilities/cisco-ise-cve-2025-20282/
https://www.theregister.com/2025/06/26/patch_up_cisco_fixes_two/
https://www.sentinelone.com/vulnerability-database/cve-2025-20282/
https://threatprotect.qualys.com/2025/06/26/cisco-identity-services-engine-unauthenticated-remote-code-execution-vulnerabilities-cve-2025-20281-cve-2025-20282/
https://www.wiz.io/vulnerability-database/cve/cve-2025-20282
https://www.tenable.com/cve/CVE-2025-20282
https://arcticwolf.com/resources/blog/cve-2025-20281-cve-2025-20282/
https://www.cve.org/CVERecord?id=CVE-2025-20282
https://cve.circl.lu/vuln/CVE-2025-20282