topic A vulnerability in RADIUS feature of Cisco Identity Services Engine in Network Access Control

A vulnerability in RADIUS feature of Cisco Identity Services Engine

Network_Sarovani — Wed, 09 Mar 2022 10:14:34 GMT

Hi Team ,

Can someone help to identify if the below vulnerability is impacting the ISE version which we have ?

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-dos-JLh9TxBp

Imapacted elements :

Cisco Ultra Cloud Core SMI.

Cisco Expressway Series

Cisco TelePresence VCS.

Re: A vulnerability in RADIUS feature of Cisco Identity Services Engin

balaji.bandi — Wed, 09 Mar 2022 10:25:16 GMT

Look at the table (in the document): Fixed Releases

Re: A vulnerability in RADIUS feature of Cisco Identity Services Engin

Rob Ingram — Wed, 09 Mar 2022 10:28:41 GMT

@Network_Sarovani you are run 2.6 P7, this is fixed in 2.6P11¹(Target May 19, 2022)....but there is a hotpatch on Cisco ISE 2.6P10 available upon request. Contact Cisco TAC to make the request.

or upgrade to another version that is not affected. Refer to the table in the document you provided.