**Name of the Vulnerable Software and Affected Versions:**

Cisco ISE and Cisco ISE-PIC versions 3.3 and later.

**Description:**

A vulnerability exists in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input. This allows an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The vulnerability has been actively exploited and a complete exploit chain has been published. The vulnerability allows attackers to send crafted API requests to execute arbitrary commands without requiring any valid credentials.

**Recommendations:**

Cisco ISE and Cisco ISE-PIC versions 3.3 and later: Update to 3.3 Patch 7 or 3.4 Patch 2.