Vulnerabilitycritical

RedMike Cyber Attack on Cisco Devices in Telecommunications

Recorded Futureby Insikt Group®Dec 4, 2024 · 00:00 UTC (Dec 4, 2024)8 min read1

Read at recordedfuture.com

Analyze CVE-2023-20198 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-20198 CVE-2023-20273

Tags: cve-2023-20198 cve-2023-20273 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-20198	Unauthenticated Privilege Escalation in Cisco IOS XE Web UI (Actively Exploited)	10.0	100%	KEV	Oct 16, 2023 KEV Oct 16, 2023
CVE-2023-20273	Authenticated Command Injection (Root) in Cisco IOS XE Web UI	7.2	93%	KEV	Oct 25, 2023 KEV Oct 23, 2023

From the original article

8 min read at recordedfuture.com

Between December 2024 and January 2025, Recorded Future’s Insikt Group identified a campaign exploiting unpatched internet-facing Cisco network devices primarily associated with global telecommunications providers. Victim organizations included a United States-based affiliate of a United Kingdom-based telecommunications provider and a South African telecommunications provider.

Recorded Future

By Insikt Group® · recordedfuture.com

Read the full article at Recorded Future

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.