CVE-2024-20532

Summary

CVE-2024-20532 is a newly disclosed vulnerability affecting the API of Cisco Identity Services Engine (ISE). An authenticated, remote attacker with valid Super Admin credentials can exploit this issue to read and delete arbitrary files on an affected device. This vulnerability arises due to insufficient validation of user-supplied parameters in API requests. Attackers can exploit this weakness by sending a specially crafted API request to the vulnerable device, potentially leading to serious consequences such as data theft or system compromise. Organizations using Cisco ISE are advised to apply the necessary patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.