Cisco ISE and ISE-PIC Authenticated Remote Code Execution Vulnerability

A vulnerability exists in a specific API of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), allowing authenticated, remote attackers to execute arbitrary code on the underlying operating system as the root user. This issue arises from inadequate validation of user-supplied input. Attackers with valid high-privileged credentials can exploit this vulnerability by sending a crafted API request. Successful exploitation enables the execution of commands with root privileges.

Impact

Exploitation of this vulnerability allows for authenticated remote code execution on the affected system as the root user.

Remediation

Cisco has released patches for this vulnerability in version 3.3 Patch 7 and 3.4 Patch 2. Instructions for upgrading can be found on the Cisco Identity Service Engine support page.