cisco-sa-ise-injection-QeXegrCw: Cisco Identity Services Engine Command Injection Vulnerabilities
First published: Wed Nov 01 2023(Updated: )
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit these vulnerabilities, an attacker must have valid credentials
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Identity Services Engine (ISE) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-ise-injection-QeXegrCw?
The severity of cisco-sa-ise-injection-QeXegrCw is considered critical due to the potential for command injection and privilege escalation.
How do I fix cisco-sa-ise-injection-QeXegrCw?
To fix cisco-sa-ise-injection-QeXegrCw, update the Cisco Identity Services Engine to the latest version as recommended in the Cisco advisory.
Who is affected by cisco-sa-ise-injection-QeXegrCw?
Authenticated local attackers with access to Cisco Identity Services Engine are affected by cisco-sa-ise-injection-QeXegrCw vulnerabilities.
What types of attacks can cisco-sa-ise-injection-QeXegrCw vulnerabilities enable?
cisco-sa-ise-injection-QeXegrCw vulnerabilities can enable command injection attacks and privilege escalation to root.
What is Cisco Identity Services Engine in relation to cisco-sa-ise-injection-QeXegrCw?
Cisco Identity Services Engine is a network management tool that, if vulnerable as identified in cisco-sa-ise-injection-QeXegrCw, can be exploited by attackers.
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- collector/cisco-recent
- source/Cisco
- agent/title
- agent/severity
- agent/weakness
- agent/references
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco identity services engine (ise)