This vulnerability in Cisco ISE and ISE-PIC arises from improper authorization checks when accessing certain resources. An unauthenticated remote attacker can exploit this flaw by sending specially crafted traffic to the device, enabling access to sensitive information such as hashed credentials. The CVSS 3.1 base score is 7.5, reflecting network attack vector, no privileges required, no user interaction, and high confidentiality impact. No official remediation or patch information is provided in the available data.

Successful exploitation allows disclosure of sensitive information, including hashed credentials, which could be leveraged in subsequent attacks. There is no impact on integrity or availability. The vulnerability affects confidentiality and could lead to further compromise if credentials are cracked or reused.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is indicated, organizations should monitor Cisco advisories for updates. Until a patch is available, limit network exposure of affected Cisco ISE devices and apply network-level access controls to restrict unauthenticated access.