Cisco
This is rated critical severity (10 out of 10). It is on the known-exploited catalogue, which means attacks using it have already been seen. Ask IT whether Cisco Identity Services Engine is in your estate, and treat that as the priority.
A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request to an affected API endpoint. A successful exploit could allow the attacker to gain unauthorized access to the affected device by bypassing the web-based management interface.
Exploitable over the network without any account, and no one has to click or open anything. High impact on confidentiality, integrity and availability, and it can reach beyond the vulnerable system.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Exploitability
Longer bar: easier to attack
Impact
Longer bar: more harm
Showing 25 of 40 matches from .
2 links from the CVE record, grouped by site; the vendor's advisory comes first.
sec.cloudapps.cisco.com1 linkVendor advisory
cisa.gov1 link
A vulnerability in Cisco Identity Services Engine involves incorrect use of privileged APIs, with a high probability of exploitation. Known-exploited catalogue reports exploitation in the wild.
Next step: Confirm whether Cisco Identity Services Engine is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 1Vendor statement missing. no VendorResearcher coverage missing. no Researcher1 signal
Only official coverage so far. Treat as an early signal.
