Cisco Identity Services Engine Command Injection Vulnerability (CNVD-2023-40185)

Cisco Identity Services Engine (ISE) is an environment-aware platform (ISE Identity Services Engine) from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. The Cisco Identity Services Engine suffers from a command injection vulnerability that can be exploited by an attacker to perform a command injection attack on the underlying operating system and elevate privileges to root.