“No credentials or user interaction are required, and Cisco says vulnerable versions of ISE and ISE-PIC are affected regardless of configuration.”
ISE is the box that decides who gets on your network. Now anyone who can reach it gets root. “Regardless of configuration” means no hardening guide saves you. Attackers found it before Cisco did, so patching today only tells you where the damage stops.