Cisco fixes root escalation vulnerability with public exploit code

Cisco patched an OS command injection vulnerability (CVE-2024-20469) in Identity Services Engine (ISE) that allows an authenticated local attacker to inject CLI commands and escalate to root; proof-of-concept exploit code is public but exploitation requires prior Administrator access on unpatched systems, and Cisco reports no observed in-the-wild exploitation while providing fixed releases for affected 3.2 and 3.3 versions.