This vulnerability in Cisco ISE is caused by insufficient validation of user-supplied input, which allows an authenticated attacker with valid administrative credentials to send a crafted HTTP request to the device and obtain write access on the underlying operating system. Cisco has assigned a high security impact rating due to the ease of privilege escalation from the achieved write access to root level. The CVSS 3.1 vector is AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N, indicating network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact.

An attacker with valid administrative credentials can exploit this vulnerability to gain write access on the underlying operating system of the affected Cisco ISE device. This write access can be escalated easily to root privileges, potentially allowing the attacker to modify system files or configurations, impacting system integrity. There is no direct confidentiality or availability impact reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vulnerability requires valid administrative credentials, ensure that administrative access is tightly controlled and monitored. Follow Cisco's official advisories for updates on patches or workarounds.