Cisco ISE Unauthenticated Remote Code Execution Vulnerability

The Cisco Identity Services Engine (ISE) is a network access control and identity management system used by large enterprises. This vulnerability allows an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root, potentially leading to unauthorized access to sensitive data and systems.

You're affected if you use A vulnerability. Specific version info not stated in the advisory. If you don't recognise this software, you're probably not affected.

1. Upgrade to Release 3.3 Patch 7 or Release 3.4 Patch 2 from the Cisco website: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/ISE-Software-Releases.html
2. If immediate upgrade isn't possible, restrict network access to your ISE instance (firewall it from the public internet) and audit admin account activity for suspicious access patterns.

• Vendor Advisory