No login? No problem: Cisco ISE flaw gave root access before fix arrived, say researchers

Shadowserver observed active exploitation starting in early July of critical unauthenticated remote code execution vulnerabilities in Cisco Identity Services Engine (ISE) (multiple CVEs rated 10.0). Cisco published advisories and patches in late June and mid-July and later confirmed some in-the-wild exploitation; no workarounds exist, so affected customers are urged to upgrade immediately.