This vulnerability arises from insecure deserialization of Java objects in Cisco ISE software. An attacker with valid high-privileged administrative credentials can send a crafted serialized Java object to the affected device, resulting in arbitrary command execution on the underlying OS. Successful exploitation can grant user-level access initially, followed by privilege escalation to root. In single-node deployments, exploitation may cause a denial of service by rendering the ISE node unavailable, preventing network access for endpoints that have not authenticated.

An attacker with high-privileged administrative credentials can execute arbitrary commands on the underlying operating system, potentially gaining root privileges. This can lead to full system compromise. Additionally, in single-node deployments, exploitation can cause a denial of service condition, making the ISE node unavailable and blocking network access for unauthenticated endpoints.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since this vulnerability requires high-privileged administrative credentials, ensure strict access controls and credential management. Monitor Cisco's official advisories for patches or updates addressing this vulnerability.