This vulnerability arises from insufficient validation of user-supplied input in IPsec Open API calls on Cisco Identity Services Engine Software versions 3.3.0, 3.4.0, and 3.5.0. An attacker with valid administrative credentials can send crafted input to the IPsec Open API endpoint, leading to arbitrary command execution on the underlying OS. The attack surface is limited to nodes configured with more than one network interface and at least one active IPsec tunnel. Cisco assigned a Security Impact Rating of High due to the ease of privilege escalation from the achieved privilege level.

Successful exploitation allows an authenticated attacker with administrative privileges to execute arbitrary OS commands, potentially leading to full system compromise. The vulnerability does not require user interaction but does require valid credentials and specific network interface configuration. The impact includes confidentiality and integrity compromise but not availability.

Patch status is not yet confirmed — check the Cisco vendor advisory for current remediation guidance. Until an official fix is available, restrict administrative access to trusted users and ensure that only necessary network interfaces and IPsec tunnels are active. Monitor for unusual activity on the IPsec Open API endpoint. Cisco has not provided a patch link or official fix information in the provided data.