Cisco Identity Services Engine Remote Code Execution and Path Traversal Vulnerabilities

An authenticated administrator with compromised credentials could execute arbitrary commands on your ISE server or access sensitive files via path traversal, potentially compromising network access control and authentication infrastructure across your entire organization.

This affects network administrators and IT security teams operating Cisco Identity Services Engine (ISE) and ISE Passive Identity Connector. ISE is commonly deployed for network access control (NAC), 802.1X authentication, and policy enforcement in enterprise networks, including utilities and critical infrastructure. Compromise of ISE could allow unauthorized network access or policy bypasses affecting all connected systems.

An attacker with valid administrative credentials logs into the ISE web interface or management API and exploits the RCE vulnerability to execute arbitrary commands on the ISE server, or exploits path traversal to read sensitive configuration files containing credentials or policies.