This vulnerability in Cisco ISE and Cisco ISE-PIC arises from insufficient validation of user-supplied input, enabling command injection via crafted HTTP requests. An attacker must have valid administrative credentials to exploit this flaw. Exploitation can result in arbitrary command execution on the OS, privilege escalation to root, and potential denial of service in single-node ISE deployments due to node unavailability.

An attacker with administrative credentials can execute arbitrary commands on the affected device's operating system, potentially gaining root privileges. This can compromise confidentiality, integrity, and availability of the system. In single-node ISE deployments, exploitation can cause denial of service, preventing network access for unauthenticated endpoints until the node is restored.

Patch status is not yet confirmed — check the Cisco vendor advisory for current remediation guidance. Until an official fix is available, restrict administrative access to trusted personnel only and monitor for suspicious activity. Consider deploying multi-node ISE clusters to mitigate availability impact in case of exploitation.