This vulnerability in Cisco ISE arises from improper limitation of a pathname to a restricted directory (path traversal), enabling an authenticated attacker with Read Only Admin privileges to send crafted HTTP requests that execute arbitrary OS commands. Successful exploitation grants user-level OS access and potential privilege escalation to root. In single-node ISE setups, this can cause node unavailability and denial of service for network endpoints awaiting authentication. The CVSS 3.1 base score is 9.9, indicating critical severity with network attack vector, low attack complexity, required privileges, no user interaction, and complete confidentiality, integrity, and availability impact.

An attacker with Read Only Admin credentials can execute arbitrary commands on the underlying OS, potentially gaining root privileges. This compromises confidentiality, integrity, and availability of the affected system. In single-node deployments, exploitation can cause denial of service, preventing network access for unauthenticated endpoints until the node is restored. There are no known exploits in the wild as of the published date.

Patch status is not yet confirmed — check the Cisco vendor advisory for current remediation guidance. Since no official fix or temporary workaround is indicated in the provided data, organizations should monitor Cisco advisories for updates. Restricting access to Read Only Admin credentials and limiting network exposure of the ISE management interface may reduce risk until a patch is available.