Куда я попал?
SECURITM это SGRC система, ? автоматизирующая процессы в службах информационной безопасности. SECURITM помогает построить и управлять ИСПДн, КИИ, ГИС, СМИБ/СУИБ, банковскими системами защиты.
А еще SECURITM это место для обмена опытом и наработками для служб безопасности.

BDU:2026-15165

CVSS: 9
16.09.2026

Уязвимость платформы управления политиками соединений Cisco Identity Services Engine (ISE) и виртуального устройства сбора данных об аутентификации пользователей Cisco ISE Passive Identity Connector (ISE-PIC), связанная с недостаточной защитой регистрационных данных, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

Уязвимость платформы управления политиками соединений Cisco Identity Services Engine (ISE) и виртуального устройства сбора данных об аутентификации пользователей Cisco ISE Passive Identity Connector (ISE-PIC) связана с недостаточной защитой регистрационных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации
Статус уязвимости:
Подтверждена производителем
Уязвимость устранена
Дата выявления: 16.09.2026
Класс уязвимости: Уязвимость кода
Наличие эксплойта: Данные уточняются
Способ эксплуатации: Несанкционированный сбор информации
Способ устранения: Нет данных
Меры по устранению: Использование рекомендаций производителя:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ise-XU5EwX5T

Идентификатор типа ошибки

Идентификатор, установленный в соответствии с общим перечнем ошибок CWE
Идентификатор Описание
CWE-522 The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Идентификаторы CVE уязвимостей

Идентификатор, базы данных общеизвестных уязвимостей информационной безопасности
Идентификатор Описание
CVE-2026-20234 Cisco Identity Services Engine Hardening Release - Insuffiencently Protected Credential Vulnerabilities

CVSS

Система общей оценки уязвимостей
Оценка Severity Версия Базовый вектор
9 HIGH 2.0 AV:N/AC:L/Au:S/C:C/I:C/A:C

Идентификаторы других систем описаний уязвимостей

CVE-2026-20234 CISCO-SA-hardening-ise-XU5EwX5T
Вендор:
  • Cisco Systems, Inc.
Тип ПО:
  • ПО сетевого программно-аппаратного средства
  • ПО виртуализации/ПО виртуального программно-аппаратного средства
Наименование ПО:
  • Cisco Identity Services Engine
  • Identity Services Engine Passive Identity Connector (ISE-PIC)
Версия ПО:
  • 2.0.1 (Cisco Identity Services Engine)
  • 2.1.0 (Cisco Identity Services Engine)
  • 2.2.1 (Cisco Identity Services Engine)
  • 2.7.0 (Cisco Identity Services Engine)
  • 2.7.0 P1 (Cisco Identity Services Engine)
  • 2.7.0 P2 (Cisco Identity Services Engine)
  • 2.7.0 P3 (Cisco Identity Services Engine)
  • 2.7.0 P4 (Cisco Identity Services Engine)
  • 2.7.0 P5 (Cisco Identity Services Engine)
  • 2.7.0 P6 (Cisco Identity Services Engine)
  • 2.7.0 P7 (Cisco Identity Services Engine)
  • 2.7.0 P8 (Cisco Identity Services Engine)
  • 2.7.0 P9 (Cisco Identity Services Engine)
  • 3.0.0 (Cisco Identity Services Engine)
  • 3.0.0 P1 (Cisco Identity Services Engine)
  • 3.0.0 P2 (Cisco Identity Services Engine)
  • 3.0.0 P3 (Cisco Identity Services Engine)
  • 3.0.0 P4 (Cisco Identity Services Engine)
  • 3.0.0 P5 (Cisco Identity Services Engine)
  • 3.0.0 P6 (Cisco Identity Services Engine)
  • 3.0.0 P7 (Cisco Identity Services Engine)
  • 3.1.0 p8 (Cisco Identity Services Engine)
  • 3.1.0 p9 (Cisco Identity Services Engine)
  • 3.1.0 p10 (Cisco Identity Services Engine)
  • 3.1.0 p11 (Cisco Identity Services Engine)
  • 3.2.0 p7 (Cisco Identity Services Engine)
  • 3.2 Patch 8 (Cisco Identity Services Engine)
  • 3.2 Patch 9 (Cisco Identity Services Engine)
  • 3.2 Patch 10 (Cisco Identity Services Engine)
  • 3.3 Patch 2 (Cisco Identity Services Engine)
  • 3.3 Patch 1 (Cisco Identity Services Engine)
  • 3.3 Patch 3 (Cisco Identity Services Engine)
  • 3.3 Patch 4 (Cisco Identity Services Engine)
  • 3.3 Patch 5 (Cisco Identity Services Engine)
  • 3.3 Patch 6 (Cisco Identity Services Engine)
  • 3.3 Patch 7 (Cisco Identity Services Engine)
  • 3.3 Patch 8 (Cisco Identity Services Engine)
  • 3.3 Patch 9 (Cisco Identity Services Engine)
  • 3.3 Patch 10 (Cisco Identity Services Engine)
  • 3.3 Patch 11 (Cisco Identity Services Engine)
  • 3.4.0 (Cisco Identity Services Engine)
  • 3.4 Patch 1 (Cisco Identity Services Engine)
  • 3.4 Patch 2 (Cisco Identity Services Engine)
  • 3.4 Patch 3 (Cisco Identity Services Engine)
  • 3.4 Patch 4 (Cisco Identity Services Engine)
  • 3.4 Patch 5 (Cisco Identity Services Engine)
  • 3.4 Patch 6 (Cisco Identity Services Engine)
  • 3.5.0 (Cisco Identity Services Engine)
  • 3.5 Patch 1 (Cisco Identity Services Engine)
  • 3.5 Patch 2 (Cisco Identity Services Engine)
  • 3.5 Patch 3 (Cisco Identity Services Engine)
  • 3.4.0 (Identity Services Engine Passive Identity Connector (ISE-PIC))
  • 3.1.0 (Cisco Identity Services Engine)
  • 3.1.0 p1 (Cisco Identity Services Engine)
  • 3.1.0 p3 (Cisco Identity Services Engine)
  • 3.1.0 p2 (Cisco Identity Services Engine)
  • 3.1.0 p4 (Cisco Identity Services Engine)
  • 3.1.0 p5 (Cisco Identity Services Engine)
  • 3.1.0 p6 (Cisco Identity Services Engine)
  • 3.1.0 p7 (Cisco Identity Services Engine)
  • 3.2.0 (Cisco Identity Services Engine)
  • 3.2.0 p1 (Cisco Identity Services Engine)
  • 3.2.0 p2 (Cisco Identity Services Engine)
  • 3.2.0 p3 (Cisco Identity Services Engine)
  • 3.2.0 p4 (Cisco Identity Services Engine)
  • 3.2.0 p5 (Cisco Identity Services Engine)
  • 3.2.0 p6 (Cisco Identity Services Engine)
  • 3.3.0 (Cisco Identity Services Engine)
  • 3.2.0 (Identity Services Engine Passive Identity Connector (ISE-PIC))
  • 3.1.0 (Identity Services Engine Passive Identity Connector (ISE-PIC))
  • 3.3.0 (Identity Services Engine Passive Identity Connector (ISE-PIC))
  • 1.1.0 (Cisco Identity Services Engine)
  • 1.1.1.268 Patch1 (Cisco Identity Services Engine)
  • 1.1.1.268 Patch2 (Cisco Identity Services Engine)
  • 1.1.1.268 Patch3 (Cisco Identity Services Engine)
  • 1.1.1.268 Patch4 (Cisco Identity Services Engine)
  • 1.1.1.268 Patch5 (Cisco Identity Services Engine)
  • 1.1.1.268 Patch6 (Cisco Identity Services Engine)
  • 1.1.2.145 Patch1 (Cisco Identity Services Engine)
  • 1.1.2.145 Patch2 (Cisco Identity Services Engine)
  • 1.1.2.145 Patch3 (Cisco Identity Services Engine)
  • 1.1.2.145 Patch4 (Cisco Identity Services Engine)
  • 1.1.2.145 Patch5 (Cisco Identity Services Engine)
  • 1.1.2.145 Patch6 (Cisco Identity Services Engine)
  • 1.1.2.145 Patch7 (Cisco Identity Services Engine)
  • 1.1.2.145 Patch8 (Cisco Identity Services Engine)
  • 1.1.2.145 Patch9 (Cisco Identity Services Engine)
  • 1.1.3.124 Patch1 (Cisco Identity Services Engine)
  • 1.1.3.124 Patch2 (Cisco Identity Services Engine)
  • 1.1.3.124 Patch3 (Cisco Identity Services Engine)
  • 1.1.3.124 Patch4 (Cisco Identity Services Engine)
  • 1.1.3.124 Patch5 (Cisco Identity Services Engine)
  • 1.1.3.124 Patch6 (Cisco Identity Services Engine)
  • 1.1.3.124 Patch7 (Cisco Identity Services Engine)
  • 1.1.4.218 Patch1 (Cisco Identity Services Engine)
  • 1.1.4.218 Patch2 (Cisco Identity Services Engine)
  • 1.1.4.218 Patch3 (Cisco Identity Services Engine)
  • 1.1.4.218 Patch4 (Cisco Identity Services Engine)
  • 1.1.4.218 Patch5 (Cisco Identity Services Engine)
  • 1.1.4.218 Patch6 (Cisco Identity Services Engine)
  • 1.1.4.218 Patch7 (Cisco Identity Services Engine)
  • 1.1.4.218 Patch8 (Cisco Identity Services Engine)
  • 1.1.4.218 Patch9 (Cisco Identity Services Engine)
  • 1.1.4.218 Patch10 (Cisco Identity Services Engine)
  • 1.1.4.218 Patch11 (Cisco Identity Services Engine)
  • 1.1.4.218 Patch12 (Cisco Identity Services Engine)
  • 1.1.4.218 Patch13 (Cisco Identity Services Engine)
  • 1.1.3.124 Patch8 (Cisco Identity Services Engine)
  • 1.1.3.124 Patch9 (Cisco Identity Services Engine)
  • 1.1.3.124 Patch10 (Cisco Identity Services Engine)
  • 1.1.3.124 Patch11 (Cisco Identity Services Engine)
  • 1.1.3.124 Patch12 (Cisco Identity Services Engine)
  • 1.1.3.124 Patch13 (Cisco Identity Services Engine)
  • 1.1.2.145 Patch10 (Cisco Identity Services Engine)
  • 1.1.1 (Cisco Identity Services Engine)
  • 1.1.1.268 Patch7 (Cisco Identity Services Engine)
  • 1.2.0 (Cisco Identity Services Engine)
  • 1.2.1.198 Patch1 (Cisco Identity Services Engine)
  • 1.2.1.198 Patch2 (Cisco Identity Services Engine)
  • 1.2.0.899 Patch14 (Cisco Identity Services Engine)
  • 1.2.0.899 Patch6 (Cisco Identity Services Engine)
  • 1.2.0.899 Patch5 (Cisco Identity Services Engine)
  • 1.2.0.899 Patch4 (Cisco Identity Services Engine)
  • 1.2.0.899 Patch3 (Cisco Identity Services Engine)
  • 1.2.0.899 Patch2 (Cisco Identity Services Engine)
  • 1.2.0.899 Patch1 (Cisco Identity Services Engine)
  • 1.2.0.899 Patch7 (Cisco Identity Services Engine)
  • 1.2.0.899 Patch8 (Cisco Identity Services Engine)
  • 1.2.0.899 Patch9 (Cisco Identity Services Engine)
  • 1.2.0.899 Patch10 (Cisco Identity Services Engine)
  • 1.2.0.899 Patch11 (Cisco Identity Services Engine)
  • 1.2.0.899 Patch12 (Cisco Identity Services Engine)
  • 1.2.0.899 Patch13 (Cisco Identity Services Engine)
  • 1.2.1.198 Patch3 (Cisco Identity Services Engine)
  • 1.2.1.198 Patch4 (Cisco Identity Services Engine)
  • 1.2.1.198 Patch5 (Cisco Identity Services Engine)
  • 1.2.1.198 Patch6 (Cisco Identity Services Engine)
  • 1.2.1.198 Patch7 (Cisco Identity Services Engine)
  • 1.2.1.198 Patch8 (Cisco Identity Services Engine)
  • 1.3.0 (Cisco Identity Services Engine)
  • 1.3.0.876 Patch5 (Cisco Identity Services Engine)
  • 1.3.0.876 Patch6 (Cisco Identity Services Engine)
  • 1.3.0.876 Patch7 (Cisco Identity Services Engine)
  • 1.3.0.876 Patch8 (Cisco Identity Services Engine)
  • 1.3.0.876 Patch1 (Cisco Identity Services Engine)
  • 1.3.0.876 Patch2 (Cisco Identity Services Engine)
  • 1.3.0.876 Patch3 (Cisco Identity Services Engine)
  • 1.3.0.876 Patch4 (Cisco Identity Services Engine)
  • 1.4.0 (Cisco Identity Services Engine)
  • 1.4.0.253 Patch3 (Cisco Identity Services Engine)
  • 1.4.0.253 Patch5 (Cisco Identity Services Engine)
  • 1.4.0.253 Patch6 (Cisco Identity Services Engine)
  • 1.4.0.253 Patch7 (Cisco Identity Services Engine)
  • 1.4.0.253 Patch8 (Cisco Identity Services Engine)
  • 1.4.0.253 Patch9 (Cisco Identity Services Engine)
  • 1.4.0.253 Patch10 (Cisco Identity Services Engine)
  • 1.4.0.253 Patch11 (Cisco Identity Services Engine)
  • 1.4.0.253 Patch12 (Cisco Identity Services Engine)
  • 2.0.1.130 Patch1 (Cisco Identity Services Engine)
  • 2.0.1.130 Patch2 (Cisco Identity Services Engine)
  • 2.0.1.130 Patch3 (Cisco Identity Services Engine)
  • 2.0.1.130 Patch4 (Cisco Identity Services Engine)
  • 2.0.1.130 Patch5 (Cisco Identity Services Engine)
  • 2.0.1.130 Patch6 (Cisco Identity Services Engine)
  • 2.0.1.130 Patch7 (Cisco Identity Services Engine)
  • 2.0.0.306 Patch2 (Cisco Identity Services Engine)
  • 2.0.0.306 Patch3 (Cisco Identity Services Engine)
  • 2.0.0.306 Patch4 (Cisco Identity Services Engine)
  • 2.0.0.306 Patch5 (Cisco Identity Services Engine)
  • 2.0.0.306 Patch6 (Cisco Identity Services Engine)
  • 2.0.0.306 Patch7 (Cisco Identity Services Engine)
  • 2.0.0.306 Patch1 (Cisco Identity Services Engine)
  • 2.1.0.474 Patch1 (Cisco Identity Services Engine)
  • 2.1.0.474 Patch2 (Cisco Identity Services Engine)
  • 2.1.0.474 Patch3 (Cisco Identity Services Engine)
  • 2.1.0.474 Patch5 (Cisco Identity Services Engine)
  • 2.1.0.474 Patch6 (Cisco Identity Services Engine)
  • 2.1.0.474 Patch7 (Cisco Identity Services Engine)
  • 2.1.0.474 Patch4 (Cisco Identity Services Engine)
  • 2.2.0.470 Patch2 (Cisco Identity Services Engine)
  • 2.2.0.470 Patch3 (Cisco Identity Services Engine)
  • 2.2.0.470 Patch4 (Cisco Identity Services Engine)
  • 2.2.0.470 Patch5 (Cisco Identity Services Engine)
  • 2.2.0.470 Patch6 (Cisco Identity Services Engine)
  • 2.2.0.470 Patch7 (Cisco Identity Services Engine)
  • 2.2.0.470 Patch1 (Cisco Identity Services Engine)
  • 2.2.0.470 Patch8 (Cisco Identity Services Engine)
  • 2.2.0.470 Patch9 (Cisco Identity Services Engine)
  • 2.2.0.470 Patch10 (Cisco Identity Services Engine)
  • 2.2.0 (Cisco Identity Services Engine)
  • 2.2.0 p1 (Cisco Identity Services Engine)
  • 2.2.0 p10 (Cisco Identity Services Engine)
  • 2.2.0 p11 (Cisco Identity Services Engine)
  • 2.2.0 p12 (Cisco Identity Services Engine)
  • 2.2.0 p13 (Cisco Identity Services Engine)
  • 2.2.0 p14 (Cisco Identity Services Engine)
  • 2.2.0 p15 (Cisco Identity Services Engine)
  • 2.2.0 p16 (Cisco Identity Services Engine)
  • 2.2.0 p2 (Cisco Identity Services Engine)
  • 2.2.0 p3 (Cisco Identity Services Engine)
  • 2.2.0 p4 (Cisco Identity Services Engine)
  • 2.2.0 p5 (Cisco Identity Services Engine)
  • 2.2.0 p6 (Cisco Identity Services Engine)
  • 2.2.0 p7 (Cisco Identity Services Engine)
  • 2.2.0 p8 (Cisco Identity Services Engine)
  • 2.2.0 p9 (Cisco Identity Services Engine)
  • 2.2.1 p10 (Cisco Identity Services Engine)
  • 2.2.0 p17 (Cisco Identity Services Engine)
  • 2.3.0 (Cisco Identity Services Engine)
  • 2.3.0.298 Patch1 (Cisco Identity Services Engine)
  • 2.3.0.298 Patch2 (Cisco Identity Services Engine)
  • 2.3.0.298 Patch3 (Cisco Identity Services Engine)
  • 2.3.0.298 Patch4 (Cisco Identity Services Engine)
  • 2.3.0.298 Patch5 (Cisco Identity Services Engine)
  • 2.4.0 (Cisco Identity Services Engine)
  • 2.4.0.357 Patch1 (Cisco Identity Services Engine)
  • 2.4.0.357 Patch2 (Cisco Identity Services Engine)
  • 2.4.0.357 Patch3 (Cisco Identity Services Engine)
  • 2.4.0.357 Patch5 (Cisco Identity Services Engine)
  • 2.4.0 p1 (Cisco Identity Services Engine)
  • 2.4.0 p10 (Cisco Identity Services Engine)
  • 2.4.0 p11 (Cisco Identity Services Engine)
  • 2.4.0 p12 (Cisco Identity Services Engine)
  • 2.4.0 p2 (Cisco Identity Services Engine)
  • 2.4.0 p3 (Cisco Identity Services Engine)
  • 2.4.0 p5 (Cisco Identity Services Engine)
  • 2.4.0 p6 (Cisco Identity Services Engine)
  • 2.4.0 p7 (Cisco Identity Services Engine)
  • 2.4.0 p8 (Cisco Identity Services Engine)
  • 2.4.0 p9 (Cisco Identity Services Engine)
  • 2.4.0 p13 (Cisco Identity Services Engine)
  • 2.4.0 p14 (Cisco Identity Services Engine)
  • 2.4.0 p4 (Cisco Identity Services Engine)
  • 2.6.0 (Cisco Identity Services Engine)
  • 2.6.0 p1 (Cisco Identity Services Engine)
  • 2.6.0 p2 (Cisco Identity Services Engine)
  • 2.6.0 p3 (Cisco Identity Services Engine)
  • 2.6.0 p5 (Cisco Identity Services Engine)
  • 2.6.0 p6 (Cisco Identity Services Engine)
  • 2.6.0 p7 (Cisco Identity Services Engine)
  • 2.6.0 p8 (Cisco Identity Services Engine)
  • 2.6.0 p9 (Cisco Identity Services Engine)
  • 2.6.0 p10 (Cisco Identity Services Engine)
  • 2.6.0 p11 (Cisco Identity Services Engine)
  • 2.6.0 p12 (Cisco Identity Services Engine)
  • 2.7.0 p10 (Cisco Identity Services Engine)
  • 3.0.0 p8 (Cisco Identity Services Engine)
  • 3.3.0 p1 (Cisco Identity Services Engine)
  • 3.0.0 (Identity Services Engine Passive Identity Connector (ISE-PIC))
Ссылки на источники:

Мы используем cookie-файлы, чтобы получить статистику, которая помогает нам улучшить сервис для вас с целью персонализации сервисов и предложений. Вы может прочитать подробнее о cookie-файлах или изменить настройки браузера. Продолжая пользоваться сайтом, вы даёте согласие на использование ваших cookie-файлов и соглашаетесь с Политикой обработки персональных данных.