A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request to an affected API endpoint. A successful exploit could allow the attacker to gain unauthorized access to the affected device by bypassing the web-based management interface.
CVSS
10.0
EPSS
0%
KEV
Yes
Exploitation
reported
CVE Published
45d ago · NVD
Added to TCL Advisory
45d ago · TCL Advisory
Added to CISA KEV
45d ago · CISA
Exploitation Status Changed
45d ago · TCL Advisory
NVD · Updated 45d ago
CISA KEV · Updated 46d ago