Unpatched Cisco ISE Devices at Risk of Root Compromise

CVE-2024-20469 is a command injection vulnerability in Cisco Identity Services Engine (ISE), allowing authenticated local attackers with admin privileges to execute arbitrary commands and escalate to root. This flaw stems from insufficient input validation in certain CLI commands. Proof-of-concept exploit code is available, raising the risk of exploitation. Cisco has released patches in ISE versions 3.2P7 and 3.3P4 to address the issue.