This vulnerability in Cisco Identity Services Engine (ISE) arises from insufficient validation of user-supplied input, enabling an authenticated remote attacker with high-privileged administrative credentials to execute arbitrary OS commands by sending a crafted HTTP request. The attacker can escalate privileges to root, gaining full control of the underlying operating system. In single-node deployments, exploitation may cause the ISE node to become unavailable, resulting in a denial of service that blocks unauthenticated endpoints from network access until the node is restored.

An attacker with valid high-privileged administrative credentials can achieve system-level access and root privilege escalation on affected Cisco ISE devices. This leads to complete compromise of the underlying operating system. Additionally, in single-node deployments, exploitation can cause denial of service, disrupting network access for unauthenticated endpoints until recovery.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since this vulnerability requires high-privileged administrative credentials, ensure strict access controls and credential management. Monitor for vendor updates and apply official fixes once available.