Cisco Identity Services Engine (cisco-sa-ISE-ABP-VNSW7Tn5)

#TRUSTED 54b6764740c703bb4bd8cc14b70a713fa6275e04c518ddba682496867b3c6bd71222e53ea8e1250972e571a2191e9ad7b1c1e54c7efd120caa22819e70bf208679c59c309e9f84397fd4d00a999350707fba9653750cb16ca5f6d0a0b2fccac18cdd4072208afe42c809a581284a6333f962c68443b50d51ff192a5bc13e1427916131f1a6bb6d0e4a6b0e66e293257f88587073dcd771231b6911fdd10037cf95ec4b3c34b3839a81ac06aecb3beea510476b405108d65c1c9809f014d0c9047af04f6d025e76e95ed5b61bdc1782ce33447d7500a53e8400670c61f48e266b21f2eff83b68d4c12819b597ad8a8110c60e344656f96b075664a1c385ac678e540701967fec5c827093692b4b68d9244fa6e00fe5e0e2bbdd5b77860ef864b431914c48dac59f2b07e5b950e3b98b60e9f002526ed5b52e65463a1da7d09427431148ef4b3413cfc274543f7ea113c68702280ac903325bf03cbb0cd6298a7af80cee7e66c0334142e8b939c036df9dba05bb9d0e5c358a53b0fef70a3fd7a1b841a6f4dbb73e88665cc10417c846b77ef17d4826d05ac32351db508ef94669264ef7ca8e40a51e33fb33ef863d1b5cca07c1abe60ddaefe5cd5378fdf2f78236703564b80b311711dcb53b6bbf89029542f282d17a84054fe50af3499f6309404ba638b26158ec71cb1359104bb544a93bc5033bcb897170d8ebb5a9c22326
#TRUST-RSA-SHA256 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
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(347945);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/09/18");

  script_cve_id("CVE-2026-76460");
  script_xref(name:"CISCO-BUG-ID", value:"CSCww39530");
  script_xref(name:"CISCO-SA", value:"cisco-sa-ISE-ABP-VNSW7Tn5");
  script_xref(name:"IAVA", value:"2026-A-1031");
  script_xref(name:"CISA-KNOWN-EXPLOITED", value:"2026/09/19");

  script_name(english:"Cisco Identity Services Engine (cisco-sa-ISE-ABP-VNSW7Tn5)");

  script_set_attribute(attribute:"synopsis", value:
"The remote device is missing a vendor-supplied security patch.");
  script_set_attribute(attribute:"description", value:
"According to its self-reported version, Cisco ISE is affected by a vulnerability.

  - A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote
    attacker to bypass authentication. (CVE-2026-76460)

Please see the included Cisco BIDs and Cisco Security Advisory for more information.");
  # https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?3da78d0d");
  script_set_attribute(attribute:"see_also", value:"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCww39530");
  script_set_attribute(attribute:"solution", value:
"Upgrade to the relevant fixed version referenced in Cisco bug ID CSCww39530");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:F/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:F/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-76460");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");
  script_cwe_id(648);

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/09/16");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/09/16");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/09/18");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:cisco:identity_services_engine");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:cisco:identity_services_engine");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:cisco:identity_services_engine_software");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"CISCO");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("cisco_ise_detect.nbin");
  script_require_keys("Host/Cisco/ISE/version");

  exit(0);
}

include('ccf.inc');
include('cisco_ise_func.inc');

var product_info = cisco::get_product_info(name:'Cisco Identity Services Engine Software');

product_info = strip_fourth_segment(product_info:product_info);

var vuln_ranges = [
 {'min_ver': '3.1', 'fix_ver': '3.1', 'required_patch': '12'},
 {'min_ver': '3.2', 'fix_ver': '3.2', 'required_patch': '11'},
 {'min_ver': '3.3', 'fix_ver': '3.3', 'required_patch': '12'},
 {'min_ver': '3.4', 'fix_ver': '3.4', 'required_patch': '7'},
 {'min_ver': '3.5', 'fix_ver': '3.5', 'required_patch': '4'}
];

var required_patch = get_required_patch(vuln_ranges:vuln_ranges, version:product_info['version']);

var reporting = make_array(
  'port'          , 0,
  'severity'      , SECURITY_HOLE,
  'version'       , product_info['version'],
  'bug_id'        , 'CSCww39530',
  'disable_caveat', TRUE,
  'fix'           , 'See vendor advisory'
);

cisco::check_and_report(
  product_info:product_info,
  reporting:reporting,
  vuln_ranges:vuln_ranges,
  required_patch:required_patch
);