CVE-2024-20527

Summary

CVE-2024-20527 is a newly disclosed vulnerability affecting the API of Cisco ISE. This issue allows authenticated, remote attackers to read and delete arbitrary files on an affected device, provided they have valid Super Admin credentials. The cause of this vulnerability is insufficient validation of user-supplied parameters in API requests. An attacker can exploit this flaw by sending a specially crafted API request to the device, potentially leading to serious data loss or system compromise. Organizations using Cisco ISE are urged to apply the necessary patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.