Cisco Identity Services Engine (cisco-sa-ise-RADIUS-dos-wR3hYPMw)

#TRUSTED 6d6072c645d7c27de47755d2a188171ccc49202ac30c6dd40061c456e37e65006c5ca893e4619f15cff9cfe7080dcedb356c0d70bda8663684ab7f7cf76d239de0411ff6a2b4732fa4ed7bd40f232da6b0b4557ce26cc8bb5dbde69df85d4de3209f5cbd7206d05955f30e89671f35777ea10a82332326cc801181ea020a70c8e7280af9ee8372f69745c1fd589cb7b64d5bfe8ad5146392a9ea2e834904d933f3896e7b9fe4c5b1ca9ec8a259ca55188231e24d7997df579ce300d21cd64d9e922c7d7fdc2d9b34e1bfadd09b0c6bd34041afc69d825f6c30edc7ac78d6b34461263f4673a265ddaf73d1278dfe6d1411e478b42ff3508b460de891d455bcc8d3c41666be44d6935f45f9e030b2d9302da5084d694f618d7300edc9aebc2773ea4306fded9b7a7d8bcc6f7931da707d1ff247a2d7a5c2fb0bde63ce88533e449dc0d79310bed22d56ca99bb8acb23f68a0105f4ea83c4a990ba4033ce79d0b4f786c420149285759cd09c44f5dd77a6454e07ae08f0bd73859e1f39d49017d995d315ebec401884f169baac6fe916c5eb2cc5f2ac1fe8976ef18fe2eda4f9d8ab42c17c0d6581d36f21aaba8a73f741e39d4124240d5ac5d654d42ae5bd06e9fca4ecca92ce65ce0100297fa344fc857e2e3b95eb294fafaa5a600ca19ee92baba9adc17f758df99f119133abaa72044f44b18daa14c6204ff0b028e6178791
#TRUST-RSA-SHA256 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
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(348175);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/09/24");

  script_cve_id("CVE-2026-20352");
  script_xref(name:"CISCO-BUG-ID", value:"CSCwv82115");
  script_xref(name:"CISCO-SA", value:"cisco-sa-ise-RADIUS-dos-wR3hYPMw");
  script_xref(name:"IAVA", value:"2026-A-1031");

  script_name(english:"Cisco Identity Services Engine (cisco-sa-ise-RADIUS-dos-wR3hYPMw)");

  script_set_attribute(attribute:"synopsis", value:
"The remote device is missing a vendor-supplied security patch.");
  script_set_attribute(attribute:"description", value:
"According to its self-reported version, Cisco ISE is affected by a vulnerability.

  - A vulnerability in the RADIUS feature of Cisco Identity Services Engine (ISE) could allow an
    unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This
    vulnerability is due to improper handling of certain RADIUS requests. An attacker could exploit this
    vulnerability by sending a crafted RADIUS request directly to an affected device. A successful exploit
    could allow the attacker to cause the ISE node to become unavailable. For single node deployments in that
    condition, endpoints that have not already authenticated would be unable to access the network until
    thenode comes back up on its own. (CVE-2026-20352)

Please see the included Cisco BIDs and Cisco Security Advisory for more information.");
  # https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-RADIUS-dos-wR3hYPMw
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?229cbafe");
  script_set_attribute(attribute:"see_also", value:"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwv82115");
  script_set_attribute(attribute:"solution", value:
"Upgrade to the relevant fixed version referenced in Cisco bug ID CSCwv82115");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-20352");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(119);

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/09/16");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/09/16");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/09/18");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:cisco:identity_services_engine");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:cisco:identity_services_engine");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:cisco:identity_services_engine_software");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"CISCO");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("cisco_ise_detect.nbin");
  script_require_keys("Host/Cisco/ISE/version");

  exit(0);
}

include('ccf.inc');
include('cisco_ise_func.inc');

var product_info = cisco::get_product_info(name:'Cisco Identity Services Engine Software');

product_info = strip_fourth_segment(product_info:product_info);

var vuln_ranges = [
 {'min_ver': '3.2', 'fix_ver': '3.2', 'required_patch': '11'},
 {'min_ver': '3.3', 'fix_ver': '3.3', 'required_patch': '12'},
 {'min_ver': '3.4', 'fix_ver': '3.4', 'required_patch': '7'},
 {'min_ver': '3.5', 'fix_ver': '3.5', 'required_patch': '4'}
];

var required_patch = get_required_patch(vuln_ranges:vuln_ranges, version:product_info['version']);

var reporting = make_array(
  'port'          , 0,
  'severity'      , SECURITY_HOLE,
  'version'       , product_info['version'],
  'bug_id'        , 'CSCwv82115',
  'disable_caveat', TRUE,
  'fix'           , 'See vendor advisory'
);

cisco::check_and_report(
  product_info:product_info,
  reporting:reporting,
  vuln_ranges:vuln_ranges,
  required_patch:required_patch
);