This vulnerability arises from insufficient validation of file operations in the REST API of Cisco Identity Services Engine Software. An attacker with valid administrative credentials can upload files with crafted paths, enabling arbitrary file placement and execution of commands as root on the device. The vulnerability affects specific versions 3.1.0 through 3.5.0 inclusive. The CVSS 3.1 base score is 7.2, indicating high severity with network attack vector, low attack complexity, high privileges required, no user interaction, and impacts on confidentiality, integrity, and availability.

Successful exploitation allows an authenticated attacker with administrative privileges to upload or copy arbitrary files to any location on the affected device and execute arbitrary commands as root. This compromises the confidentiality, integrity, and availability of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vulnerability requires valid administrative credentials, restricting administrative access and monitoring for suspicious activity may help reduce risk until a fix is available.