CSIRT-Kabupaten

Ringkasan Kerentanan (Vulnerability Overview)

Rilis: 01 October 2026

Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input allowing an attacker to exploit this vulnerability by submitting a crafted API request. Successful exploitation could allow an attacker to perform remote code execution and obtaining root privileges on an affected device.

Tindakan Mitigasi yang Wajib Diterapkan (Required Action)

Instruksi Keamanan untuk Pengelola TI / OPD

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Seluruh pengelola server dan aplikasi di lingkungan OPD Kabupaten Ciamis diimbau untuk segera mengaudit perangkat terdampak dan mengaplikasikan patch sebelum batas waktu mitigasi.

Produk & Versi Terdampak

Produk	Versi Basis	Batas Terdampak	Status Keamanan
Cisco Identity Services Engine Software	3.3.0	—	AFFECTED
Cisco Identity Services Engine Software	3.3 Patch 2	—	AFFECTED
Cisco Identity Services Engine Software	3.3 Patch 1	—	AFFECTED
Cisco Identity Services Engine Software	3.3 Patch 3	—	AFFECTED
Cisco Identity Services Engine Software	3.4.0	—	AFFECTED
Cisco Identity Services Engine Software	3.3 Patch 4	—	AFFECTED
Cisco Identity Services Engine Software	3.4 Patch 1	—	AFFECTED
Cisco Identity Services Engine Software	3.3 Patch 5	—	AFFECTED
Cisco Identity Services Engine Software	3.3 Patch 6	—	AFFECTED
Cisco ISE Passive Identity Connector	3.2.0	—	AFFECTED