An unauthenticated remote attacker can send crafted requests to an insufficiently protected Cisco ISE/ISE-PIC API endpoint to bypass the web-based management interface and gain unauthorized access. Cisco warns successful exploitation may lead to root command execution and log tampering. Upgrade to fixed releases 3.1 Patch 12, 3.2 Patch 11, 3.3 Patch 12, 3.4 Patch 7, or 3.5 Patch 4. Restrict management access with iACLs.