No login? No problem: Cisco ISE flaw gave root access before fix arrived, say researchers

Shadowserver claims miscreants were already poking at a critical hole in early July, long before Switchzilla patched it

Threat actors have actively exploited a newly patched vulnerability in Cisco’s Identity Services Engine (ISE) software since early July, weeks before the networking giant got around to issuing a fix.…