This vulnerability affects the endpoint posture status reporting functionality of the guest portal web application in Cisco ISE. Due to insufficient authentication on an internal interface exposed via the guest portal, an unauthenticated remote attacker can send crafted requests to submit forged posture status events into the endpoint posture pipeline. Successful exploitation allows manipulation of posture status on the affected system. The CVSS 3.1 base score is 5.3 (medium severity), reflecting network attack vector, low attack complexity, no privileges or user interaction required, no confidentiality or availability impact, and limited integrity impact.

An attacker exploiting this vulnerability can manipulate endpoint posture status by submitting forged status events without authentication. This could affect the accuracy and reliability of posture assessments within Cisco ISE, potentially impacting network access control decisions based on endpoint posture. There is no direct confidentiality or availability impact reported.

Patch status is not yet confirmed — check the Cisco vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, organizations should monitor Cisco advisories closely and consider restricting access to the guest portal or internal interfaces if feasible.