A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate. This vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to bypass authorization to obtain an endpoint certificate.
Este es el aviso número 113 sobre productos Cisco en pwned.cl.
| CVE | CVE-2026-20241 |
|---|---|
| Severidad | MEDIUM |
| CVSS | 5.3 / 10 |
| EPSS | 0.3% en 30 días (percentil 16) |
| CWE | CWE-285 |
| Exposición (Shodan) | sin hosts expuestos detectados actualmente |