The vulnerability in Cisco ISE allows an authenticated, remote attacker to obtain write access on the underlying operating system through insufficient validation of user‑supplied HTTP input. The attacker must possess valid administrative credentials and can send a crafted HTTP request to the device. Successful exploitation grants the attacker write capability to the OS, which can be leveraged to gain root privileges, enabling arbitrary code execution and full system compromise. The CVE's Security Impact Rating is High because reaching root is considered easy once write access is achieved.

Cisco Identity Services Engine Software is the affected product. Specific version information is not provided in the advisory; any current or older version of Cisco ISE that has not been patched may be vulnerable.

The CVSS score is 4.9, indicating a moderate severity, but the CMS assigned a High impact rating because the privilege escalation potential is high. The EPSS score is less than 1%, suggesting a low current exploitation probability. Attackers must be authenticated with valid administrative credentials and must craft a malicious HTTP request to trigger the flaw. The vulnerability is not listed in CISA’s KEV catalog, so no known widespread exploit activity is reported at this time.