Privilege Escalation in Cisco ISE's Embedded Service Router Affects System Security

CVE-2023-20193

Summary

A vulnerability exists in the Embedded Service Router (ESR) of Cisco Identity Services Engine (ISE) that may allow an authenticated local attacker to gain escalated privileges and manipulate files on the operating system. This issue arises from improper management of user privileges within the ESR console, enabling an attacker with valid Administrator access to send specially crafted requests to the device. If successfully exploited, this vulnerability could permit the attacker to read, write, or delete arbitrary files, thereby compromising the security and integrity of the affected system. The ESR feature must be enabled and licensed on the device, and users can confirm its status via the Admin GUI under Administration > Settings > Protocols > IPSec.

References