Vulnerabilityhigh

Weathering the storm: In the midst of a Typhoon

Cisco TalosFeb 20, 2025 · 13:00 UTC (Feb 20, 2025)9 min read3 · 1 read

Read at blog.talosintelligence.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2018-0171 CVE-2023-20198 CVE-2023-20273 CVE-2024-20399

Tags: cve-2018-0171 cve-2023-20198 cve-2023-20273 cve-2024-20399 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-0171	Unauthenticated RCE/DoS in Cisco IOS & IOS XE Smart Install	9.8	99%	KEV	Mar 28, 2018 KEV Nov 3, 2021
CVE-2023-20198	Unauthenticated Privilege Escalation in Cisco IOS XE Web UI (Actively Exploited)	10.0	100%	KEV	Oct 16, 2023 KEV Oct 16, 2023
CVE-2023-20273	Authenticated Command Injection (Root) in Cisco IOS XE Web UI	7.2	93%	KEV	Oct 25, 2023 KEV Oct 23, 2023
CVE-2024-20399	Authenticated Command Injection in Cisco NX-OS Grants Root Privileges	6.7	4%	KEV	Jul 1, 2024 KEV Jul 2, 2024

From the original article

9 min read at blog.talosintelligence.com

Cisco Talos has been closely monitoring reports of widespread intrusion activity against several major U. S. telecommunications companies.

Cisco Talos

blog.talosintelligence.com

Read the full article at Cisco Talos

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.