Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in Cisco Identity Services Engine (ISE) ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuführen.
Product
Die Cisco Identity Services Engine (ISE) bietet eine attributbasierte Zugangs-Kontroll-Lösung.
Vulnerabilities 5
-
High 8.8
A vulnerability in a specific Cisco ISE CLI command could allow an authenticated, local attacker to perform command inj…
-
Medium 6.0
A vulnerability in a specific Cisco ISE CLI command could allow an authenticated, local attacker to perform command inj…
-
Medium 4.7
Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected…
-
Medium 4.7
Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected…
-
Medium 4.3
A vulnerability in the CDP processing feature of Cisco ISE could allow an unauthenticated, adjacent attacker to cause a…
Revision history
-
#1
Initiale Fassung
References
-
Cisco Security Advisory vom 2023-11-01
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-injection-QeXegrCw
-
Cisco Security Advisory vom 2023-11-01
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-file-upload-FceLP4xs