This vulnerability in Cisco ISE Software versions 3.1.0, 3.2.0, 3.3.0, 3.4.0, and 3.5.0 affects the SSID BYOD onboarding workflow. Due to insufficient authentication checks, an unauthenticated attacker in adjacent network proximity can spoof a legitimate user and hijack their onboarding session. The attacker can then be redirected to the guest web portal and gain access to protected 802.1X networks. The CVSS 3.1 vector indicates the attack requires adjacent network access, low attack complexity, no privileges, and user interaction, with a scope change and limited integrity impact but no confidentiality or availability impact.

An attacker who successfully exploits this vulnerability can hijack the onboarding session of another user and gain unauthorized access to protected 802.1X networks. This compromises network integrity by allowing unauthorized network access. There is no direct impact on confidentiality or availability according to the CVSS metrics.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, organizations should monitor Cisco advisories for updates. Until a fix is available, consider restricting physical or wireless adjacency to trusted users and networks to reduce exposure.