Cisco Identity Services Engine Express vulnerabilities

1 known vulnerability affecting cisco/identity_services_engine_express.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2017-12261HIGHCVSS 7.8v1.4v2.0+2 more2017-11-02

CVE-2017-12261 [HIGH] CWE-264 CVE-2017-12261: A vulnerability in the restricted shell of the Cisco Identity Services Engine (ISE) that is accessib A vulnerability in the restricted shell of the Cisco Identity Services Engine (ISE) that is accessible via SSH could allow an authenticated, local attacker to run arbitrary CLI commands with elevated privileges. The vulnerability is due to incomplete input validation of the user input for CLI commands issued at the restricted shell. An attacker could