TI-2023-06876 Aliases CVE-2023-20170 GHSA-q87c-3jrw-rr6f

Command injection in Cisco Identity Services Engine Software

LOW 32CWE-77Published 2023-11-01 · Updated 2025-12-16

Key facts

Attack vector: Local
Privileges required: High
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-77.

Summary

A vulnerability in a specific Cisco ISE CLI command could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, an attacker must have valid Administrator-level privileges on the affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted CLI command. A successful exploit could allow the attacker to elevate privileges to root.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.0048 41st percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Cisco	Cisco Identity Services Engine Software	N/A	—	No fix listed	CNA

Cisco Identity Services Engine Software VendorCisco Affected N/A Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPE	Versions	Role	Vendor
cpe:2.3:a:cisco:identity_services_engine:3.2:-::::::	3.2	Vulnerable	Cisco
cpe:2.3:a:cisco:identity_services_engine:3.2:patch1::::::	3.2 patch1	Vulnerable	Cisco
cpe:2.3:a:cisco:identity_services_engine:3.2:patch2::::::	3.2 patch2	Vulnerable	Cisco

cpe:2.3:a:cisco:identity_services_engine:3.2:-:*:*:*:*:*:* Versions 3.2 Vulnerable ·Cisco
cpe:2.3:a:cisco:identity_services_engine:3.2:patch1:*:*:*:*:*:* Versions 3.2 patch1 Vulnerable ·Cisco
cpe:2.3:a:cisco:identity_services_engine:3.2:patch2:*:*:*:*:*:* Versions 3.2 patch2 Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2023-20170
2026-10-03 Alias added: GHSA-q87c-3jrw-rr6f

References

Advisory 1

cisco-sa-ise-injection-QeXegrCw

TI-2026-53488 Cisco Identity Services Engine Authentication Bypass Vulnerability KEVCVSS 3.1CRITICAL 10.0
TI-2025-14632 Cisco ISE API Unauthenticated Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 10.0
TI-2025-14578 Cisco ISE API Unauthenticated Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 10.0
TI-2021-19919 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints KEVCVSS 3.1CRITICAL 10.0
TI-2025-14579 Cisco ISE API Unauthenticated Remote Code Execution Vulnerability CVSS 3.1CRITICAL 10.0
TI-2022-05522 OS command injection in Cisco Identity Services Engine Software CVSS 3.1HIGH 8.8

See all 197 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences