Critical Injection Vulnerability in Cisco Identity Services Engine

What changed

A significant vulnerability has been discovered in the API of Cisco Identity Services Engine (ISE) and Cisco ISE-PIC. This flaw allows unauthenticated remote attackers to execute arbitrary code at the root level on affected systems.

The vulnerability stems from insufficient validation of user-supplied input, which can be exploited through crafted API requests.

Who is affected

Organizations utilizing Cisco Identity Services Engine are at risk, particularly those that rely on its API for network access control.

The following groups are notably affected:

• Cisco Identity Services Engine users
• Cisco ISE-PIC users
• Network administrators managing Cisco environments
• Organizations with critical infrastructure relying on Cisco ISE for identity management

What to do

Immediate action is recommended to mitigate the risk associated with this vulnerability. Organizations should assess their exposure and implement necessary security measures.

Consider the following steps:

• Review and update Cisco Identity Services Engine to the latest version provided by Cisco.
• Implement strict input validation and monitoring for API requests.
• Limit access to the API to trusted networks and authenticated users only.
• Stay informed through Cisco's security advisories for any updates or patches related to this vulnerability.