3.8

CVE-2026-20071

ISE 802.1x Session Hijack Vulnerability

A vulnerability in the SSID bring-your-own-device (BYOD) onboarding workflow of Cisco ISE could allow an unauthenticated, adjacent attacker to hijack the onboarding session of another user and access protected 802.1X networks.  

This vulnerability is due to insufficient authentication checks that are performed while a user is being onboarded. An attacker could exploit this vulnerability by spoofing the legitimate user and triggering a redirection to the guest web portal. A successful exploit could allow the attacker to take over the user session and gain access to the protected 802.1X network.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerCisco
≫
Produkt Cisco Identity Services Engine Software
Default Statusunknown
Version 3.1.0
Status affected
Version 3.1.0 p1
Status affected
Version 3.1.0 p3
Status affected
Version 3.1.0 p2
Status affected
Version 3.2.0
Status affected
Version 3.1.0 p4
Status affected
Version 3.1.0 p5
Status affected
Version 3.2.0 p1
Status affected
Version 3.1.0 p6
Status affected
Version 3.2.0 p2
Status affected
Version 3.1.0 p7
Status affected
Version 3.3.0
Status affected
Version 3.2.0 p3
Status affected
Version 3.2.0 p4
Status affected
Version 3.1.0 p8
Status affected
Version 3.2.0 p5
Status affected
Version 3.2.0 p6
Status affected
Version 3.1.0 p9
Status affected
Version 3.3 Patch 2
Status affected
Version 3.3 Patch 1
Status affected
Version 3.3 Patch 3
Status affected
Version 3.4.0
Status affected
Version 3.2.0 p7
Status affected
Version 3.3 Patch 4
Status affected
Version 3.4 Patch 1
Status affected
Version 3.1.0 p10
Status affected
Version 3.3 Patch 5
Status affected
Version 3.3 Patch 6
Status affected
Version 3.4 Patch 2
Status affected
Version 3.3 Patch 7
Status affected
Version 3.4 Patch 3
Status affected
Version 3.5.0
Status affected
Version 3.4 Patch 4
Status affected
Version 3.3 Patch 8
Status affected
Version 3.2 Patch 8
Status affected
Version 3.5 Patch 1
Status affected
Version 3.3 Patch 9
Status affected
Version 3.2 Patch 9
Status affected
Version 3.4 Patch 5
Status affected
Version 3.5 Patch 3
Status affected
Version 3.5 Patch 2
Status affected
Version 3.3 Patch 10
Status affected
Version 3.3 Patch 11
Status affected
Version 3.4 Patch 6
Status affected
Version 3.2 Patch 10
Status affected
Version 3.1.0 p72
Status affected
Version 3.1.0 p11
Status affected
Version 3.3 Patch 12
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.15% 0.042
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Cisco PSIRT 3.8 2.1 1.4
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
CWE-290 Authentication Bypass by Spoofing

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-vuln-kWLeNnRD