This vulnerability in Cisco Identity Services Engine software permits an authenticated administrator to perform command injection through specially crafted HTTP requests. The flaw enables execution of arbitrary OS commands, potentially escalating privileges to root. The impact includes full system compromise and denial of service in single-node setups. The CVSS score is 9.9, indicating critical severity. Affected versions explicitly include 3.1.0, 3.2.0, 3.3.0, 3.4.0, and 3.5.0. No official patch or remediation level is currently provided in the available data.

Successful exploitation allows an attacker with administrative access to execute arbitrary commands on the underlying OS, leading to full system compromise including root privilege escalation. In single-node deployments, exploitation can cause denial of service by making the node unavailable, disrupting network access for unauthenticated endpoints.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict administrative access to trusted personnel only and monitor for suspicious activity involving HTTP requests to the Cisco ISE management interface.