« Volver al listado

CVE-2026-76444

Estado: AnalizadaMedia (5.3)—

A vulnerability in an internal service of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to retrieve sensitive configuration information from an affected device.

This vulnerability is due to missing authentication on the Policy Runtime Repository Table (PRRT) service. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to obtain sensitive configuration information from the affected device.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Cisco — Identity Services EngineCisco — Identity Services Engine Passive Identity Connector

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-76444",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-76444",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-09-19T13:46:10.724095Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@cisco.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "Cisco",
          "product": "Cisco Identity Services Engine Software",
          "versions": [
            {
              "status": "affected",
              "version": "3.4.0"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 1"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 2"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 3"
            },
            {
              "status": "affected",
              "version": "3.5.0"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 4"
            },
            {
              "status": "affected",
              "version": "3.5 Patch 1"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 5"
            },
            {
              "status": "affected",
              "version": "3.5 Patch 3"
            },
            {
              "status": "affected",
              "version": "3.5 Patch 2"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 6"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Cisco",
          "product": "Cisco ISE Passive Identity Connector",
          "versions": [
            {
              "status": "affected",
              "version": "3.4.0"
            },
            {
              "status": "affected",
              "version": "3.5.0"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2026-09-16T21:17:19.463",
  "references": [
    {
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multiauth-bypass-sgD2HbL4",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@cisco.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-306"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in an internal service of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to retrieve sensitive configuration information from an affected device.\r\n\r\nThis vulnerability is due to missing authentication on the Policy Runtime Repository Table (PRRT) service. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to obtain sensitive configuration information from the affected device."
    }
  ],
  "lastModified": "2026-09-28T13:06:58.163",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CC0525FD-C4D7-4B48-BF35-1791391AB148"
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "68C96F6B-51EE-4D03-9598-CBFD16DA22EF"
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "62F25185-D19E-4EC5-8A68-7AB669B76E90"
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C457D2EC-FB63-49B7-A90E-CE67ED763BAE"
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6566330F-A048-44A1-9821-7A5844C82CEC"
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1154F196-2CB3-4AC2-BE00-11A8942EA999"
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7E30ECF6-5B1D-4280-AA02-123153E68F28"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D23905E0-E525-49B1-8E5F-4EB42D186768"
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "74509498-38EF-4345-9583-CEF5C26CA1D8"
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CD05FF93-7B8C-4283-9DB7-E03FE98FAADF"
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0F9B6A8E-E773-44A3-9266-878F0C58EB41"
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D3727619-E0CA-4CA9-BE35-0C732BCF1741"
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2CFB7565-3930-409C-B5DB-CE77E6ED7C42"
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A388D916-D6A1-4D3A-A48A-A150F387B755"
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2610FD35-BC4B-41B7-9C92-E6E5264FEE54"
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3FEE4377-B238-4442-9892-28CECFB2319E"
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6598563B-7E32-43FB-96A7-88C53E4CE226"
            },
            {
              "criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "719C8E82-269D-4F21-B2B4-4CD3033A17F9"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}