Threat actorhighExploited in the wild

Cisco Confirms Salt Typhoon Exploited CVE-2018

The Hacker Newsby @TheHackersNewsFeb 21, 2025 · 07:38 UTC (Feb 21, 2025)3 min read1

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2018-0171 CVE-2023-20198 CVE-2023-20273

Tags: cve-2018-0171 cve-2023-20198 cve-2023-20273 threat-actor

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-0171	Unauthenticated RCE/DoS in Cisco IOS & IOS XE Smart Install	9.8	99%	KEV	Mar 28, 2018 KEV Nov 3, 2021
CVE-2023-20198	Unauthenticated Privilege Escalation in Cisco IOS XE Web UI (Actively Exploited)	10.0	100%	KEV	Oct 16, 2023 KEV Oct 16, 2023
CVE-2023-20273	Authenticated Command Injection (Root) in Cisco IOS XE Web UI	7.2	93%	KEV	Oct 25, 2023 KEV Oct 23, 2023

From the original article

3 min read at thehackernews.com

 Ravie Lakshmanan  Feb 21, 2025 Network Security / Vulnerability Cisco has confirmed that a Chinese threat actor known as Salt Typhoon gained access by likely abusing a known security flaw tracked as CVE-2018-0171 , and by obtaining legitimate victim login credentials as part of a targeted campaign aimed at major U. S. telecommunications companies.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.