CyberRota Analysis
AI-GeneratedA vulnerability in the SSID bring-your-own-device onboarding workflow of Cisco ISE allows unauthenticated adjacent attackers to hijack user onboarding sessions, potentially granting them access to protected 802.1X networks. This issue arises from insufficient authentication checks during the onboarding process, enabling attackers to spoof legitimate users and redirect them to the guest web portal. Organizations utilizing Cisco ISE for network access control should prioritize addressing this vulnerability to mitigate the risk of unauthorized network access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability in the SSID bring-your-own-device (BYOD) onboarding workflow of Cisco ISE could allow an unauthenticated, adjacent attacker to hijack the onboarding session of another user and access protected 802.1X networks. This vulnerability is due to insufficient authentication checks that are performed while a user is being onboarded. An attacker could exploit this vulnerability by spoofing the legitimate user and triggering a redirection to the guest web portal. A successful exploit could allow the attacker to take over the user session and gain access to the protected 802.1X network.