topic CSCwo99449 - ISE remote code in Network Access Control

CSCwo99449 - ISE remote code

DSV1 — Thu, 26 Jun 2025 16:38:43 GMT

Its not clear if its northbound API or something internal that can be triggered by RADIUS/TACACS packets

ahollifield — Thu, 26 Jun 2025 16:49:20 GMT

"Internal API" The listed ISE versions are vulnerable by default. Please patch.

m-karasek — Thu, 17 Jul 2025 16:03:02 GMT

And now patch once more? Do you now what started to be wrong with patch 6 in these three weeks?

Marcelo Morais — Fri, 18 Jul 2025 05:54:40 GMT

please take a look at:

3.3 P6 did not solve all the issues.

Hope this helps !!!