Cisco Identity Services Engine uses default credentials for its database. Remote attackers could supply these credentials to gain full administrative access to the device.
Cisco Identity Services Engine (ISE)
Remote Code Execution
Remote Administrative Device Access Remote attackers could supply default credentials to gain full administrative access to any affected device.
BeyondTrust Prevention and Detection:
- BeyondTrust's Retina® Network Security Scanner scans devices to detect for this vulnerability.
- 15248 - Cisco Identity Services Engine Default Credentials (Zero-Day)
No mitigation has been provided.