This vulnerability in Cisco ISE and ISE-PIC arises from insufficient validation of user-supplied input, enabling path traversal attacks. An attacker with valid administrative credentials can send crafted HTTP requests to execute arbitrary OS commands, escalate privileges to root, and potentially cause denial of service in single-node deployments by rendering the node unavailable. The CVSS 3.1 base score is 9.1, reflecting network attack vector, low attack complexity, high privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. Affected versions explicitly include 3.1.0, 3.2.0, 3.3.0, 3.4.0, and 3.5.0.

Successful exploitation allows an authenticated attacker to execute arbitrary commands on the underlying OS, escalate privileges to root, and potentially cause denial of service by making the ISE node unavailable. This can disrupt network access for endpoints that have not yet authenticated, impacting network availability and security.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vulnerability requires valid administrative credentials, ensure strict access controls and credential management. Monitor Cisco advisories for official fixes or temporary mitigations.