CVE-2022-20756

A vulnerability in the RADIUS feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause the affected system to stop processing RADIUS packets. This vulnerability is due to improper handling of certain RADIUS requests. An attacker could exploit this vulnerability by attempting to authenticate to a network or a service where the access server is using Cisco ISE as the RADIUS server. A successful exploit could allow the attacker to cause Cisco ISE to stop processing RADIUS requests, causing authentication/authorization timeouts, which would then result in legitimate requests being denied access. Note: To recover the ability to process RADIUS packets, a manual restart of the affected Policy Service Node (PSN) is required. See the Details section for more information.

• CWE-399

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-dos-JLh9TxBpVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-dos-JLh9TxBpVendor Advisory

Published

Apr 6, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-20750A vulnerability in the checkpoint manager implementation of …7.5
• CVE-2022-20751A vulnerability in the Snort detection engine integration fo…7.5
• CVE-2022-20752A vulnerability in Cisco Unified Communications Manager (Uni…5.3
• CVE-2022-20753A vulnerability in web-based management interface of Cisco S…7.2
• CVE-2022-20754Multiple vulnerabilities in the API and web-based management…7.2
• CVE-2022-20755Multiple vulnerabilities in the API and web-based management…7.2
• CVE-2022-20757A vulnerability in the connection handling function in Cisco…7.5
• CVE-2022-20758A vulnerability in the implementation of the Border Gateway …6.8
• CVE-2022-20759A vulnerability in the web services interface for remote acc…8.8
• CVE-2022-2076Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-20760A vulnerability in the DNS inspection handler of Cisco Adapt…7.5
• CVE-2022-20761A vulnerability in the integrated wireless access point (AP)…6.5