Read the docs
TI-2020-02905 Aliases CVE-2020-3353GHSA-vrjw-2w56-8m6q

Cisco Identity Services Engine Denial of Service Vulnerability

Priority LOW 28CWE-362Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

A vulnerability in the syslog processing engine of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a race condition that may occur when syslog messages are processed. An attacker could exploit this vulnerability by sending a high rate of syslog messages to an affected device. A successful exploit could allow the attacker to cause the Application Server process to crash, resulting in a DoS condition.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0076 55th percentileScored 2026-11-08
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
CiscoCisco Identity Services Engine Softwareall versions—No fix listedCNA
  • Cisco Identity Services Engine Software VendorCisco Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 21

CPEVersionsRoleVendor
cpe:2.3:a:cisco:identity_services_engine:2.2.0.470:-:*:*:*:*:*:*2.2.0.470VulnerableCisco
cpe:2.3:a:cisco:identity_services_engine:2.2.0.470:patch1:*:*:*:*:*:*2.2.0.470 patch1VulnerableCisco
cpe:2.3:a:cisco:identity_services_engine:2.2.0.470:patch10:*:*:*:*:*:*2.2.0.470 patch10VulnerableCisco
cpe:2.3:a:cisco:identity_services_engine:2.2.0.470:patch11:*:*:*:*:*:*2.2.0.470 patch11VulnerableCisco
cpe:2.3:a:cisco:identity_services_engine:2.2.0.470:patch12:*:*:*:*:*:*2.2.0.470 patch12VulnerableCisco
cpe:2.3:a:cisco:identity_services_engine:2.2.0.470:patch2:*:*:*:*:*:*2.2.0.470 patch2VulnerableCisco
cpe:2.3:a:cisco:identity_services_engine:2.2.0.470:patch3:*:*:*:*:*:*2.2.0.470 patch3VulnerableCisco
cpe:2.3:a:cisco:identity_services_engine:2.2.0.470:patch4:*:*:*:*:*:*2.2.0.470 patch4VulnerableCisco
cpe:2.3:a:cisco:identity_services_engine:2.2.0.470:patch5:*:*:*:*:*:*2.2.0.470 patch5VulnerableCisco
cpe:2.3:a:cisco:identity_services_engine:2.2.0.470:patch6:*:*:*:*:*:*2.2.0.470 patch6VulnerableCisco
  • cpe:2.3:a:cisco:identity_services_engine:2.2.0.470:-:*:*:*:*:*:* Versions 2.2.0.470 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:identity_services_engine:2.2.0.470:patch1:*:*:*:*:*:* Versions 2.2.0.470 patch1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:identity_services_engine:2.2.0.470:patch10:*:*:*:*:*:* Versions 2.2.0.470 patch10 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:identity_services_engine:2.2.0.470:patch11:*:*:*:*:*:* Versions 2.2.0.470 patch11 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:identity_services_engine:2.2.0.470:patch12:*:*:*:*:*:* Versions 2.2.0.470 patch12 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:identity_services_engine:2.2.0.470:patch2:*:*:*:*:*:* Versions 2.2.0.470 patch2 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:identity_services_engine:2.2.0.470:patch3:*:*:*:*:*:* Versions 2.2.0.470 patch3 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:identity_services_engine:2.2.0.470:patch4:*:*:*:*:*:* Versions 2.2.0.470 patch4 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:identity_services_engine:2.2.0.470:patch5:*:*:*:*:*:* Versions 2.2.0.470 patch5 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:identity_services_engine:2.2.0.470:patch6:*:*:*:*:*:* Versions 2.2.0.470 patch6 Vulnerable ·Cisco
Show 11 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:cisco:identity_services_engine:2.2.0.470:patch7:*:*:*:*:*:*2.2.0.470 patch7VulnerableCisco
cpe:2.3:a:cisco:identity_services_engine:2.2.0.470:patch8:*:*:*:*:*:*2.2.0.470 patch8VulnerableCisco
cpe:2.3:a:cisco:identity_services_engine:2.2.0.470:patch9:*:*:*:*:*:*2.2.0.470 patch9VulnerableCisco
cpe:2.3:a:cisco:identity_services_engine:2.3.0.298:-:*:*:*:*:*:*2.3.0.298VulnerableCisco
cpe:2.3:a:cisco:identity_services_engine:2.3.0.298:patch1:*:*:*:*:*:*2.3.0.298 patch1VulnerableCisco
cpe:2.3:a:cisco:identity_services_engine:2.3.0.298:patch2:*:*:*:*:*:*2.3.0.298 patch2VulnerableCisco
cpe:2.3:a:cisco:identity_services_engine:2.3.0.298:patch3:*:*:*:*:*:*2.3.0.298 patch3VulnerableCisco
cpe:2.3:a:cisco:identity_services_engine:2.3.0.298:patch4:*:*:*:*:*:*2.3.0.298 patch4VulnerableCisco
cpe:2.3:a:cisco:identity_services_engine:2.3.0.298:patch5:*:*:*:*:*:*2.3.0.298 patch5VulnerableCisco
cpe:2.3:a:cisco:identity_services_engine:2.4.0.357:-:*:*:*:*:*:*2.4.0.357VulnerableCisco
cpe:2.3:a:cisco:identity_services_engine:2.4.0.357:patch1:*:*:*:*:*:*2.4.0.357 patch1VulnerableCisco
  • cpe:2.3:a:cisco:identity_services_engine:2.2.0.470:patch7:*:*:*:*:*:* Versions 2.2.0.470 patch7 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:identity_services_engine:2.2.0.470:patch8:*:*:*:*:*:* Versions 2.2.0.470 patch8 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:identity_services_engine:2.2.0.470:patch9:*:*:*:*:*:* Versions 2.2.0.470 patch9 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:identity_services_engine:2.3.0.298:-:*:*:*:*:*:* Versions 2.3.0.298 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:identity_services_engine:2.3.0.298:patch1:*:*:*:*:*:* Versions 2.3.0.298 patch1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:identity_services_engine:2.3.0.298:patch2:*:*:*:*:*:* Versions 2.3.0.298 patch2 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:identity_services_engine:2.3.0.298:patch3:*:*:*:*:*:* Versions 2.3.0.298 patch3 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:identity_services_engine:2.3.0.298:patch4:*:*:*:*:*:* Versions 2.3.0.298 patch4 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:identity_services_engine:2.3.0.298:patch5:*:*:*:*:*:* Versions 2.3.0.298 patch5 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:identity_services_engine:2.4.0.357:-:*:*:*:*:*:* Versions 2.4.0.357 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:identity_services_engine:2.4.0.357:patch1:*:*:*:*:*:* Versions 2.4.0.357 patch1 Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-3353
  2. 2026-10-03 Alias added: GHSA-vrjw-2w56-8m6q

References

Advisory 1

  • TI-2026-53488 Cisco Identity Services Engine Authentication Bypass Vulnerability KEVCVSS 3.1CRITICAL 10.0
  • TI-2025-14632 Cisco ISE API Unauthenticated Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 10.0
  • TI-2025-14578 Cisco ISE API Unauthenticated Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 10.0
  • TI-2021-19919 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints KEVCVSS 3.1CRITICAL 10.0
  • TI-2025-14579 Cisco ISE API Unauthenticated Remote Code Execution Vulnerability CVSS 3.1CRITICAL 10.0
  • TI-2022-05522 OS command injection in Cisco Identity Services Engine Software CVSS 3.1HIGH 8.8
See all 197 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences