Cisco Identity Services Engine Remote Code Execution Vulnerabilities

Multiple remote code execution vulnerabilities in Cisco Identity Services Engine allow an authenticated attacker with read-only admin credentials to execute arbitrary commands on the ISE operating system. Exploitation begins with a crafted HTTP request sent to an affected device, exploiting insufficient input validation. Successful compromise allows the attacker to gain user-level access and escalate to root. In single-node deployments, this can cause a denial of service condition that prevents unauthenticated endpoints from accessing the network until the ISE node is restored.