CyberRota Analysis
AI-GeneratedA critical vulnerability in the API of Cisco Identity Services Engine (ISE) allows unauthenticated remote attackers to bypass authentication controls. By sending specially crafted requests to the affected API endpoint, attackers can gain unauthorized access to the device, compromising its security. Organizations using Cisco ISE should prioritize immediate remediation to protect against potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request to an affected API endpoint. A successful exploit could allow the attacker to gain unauthorized access to the affected device by bypassing the web-based management interface.
Related CVEs
Other vulnerabilities affecting the same vendor(s)