Cisco Warns of Vulnerability in IOS and IOS XE Software After Exploitation Attempts
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-20034 | Vulnerability in the Elasticsearch database used in the of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to access the… | 7.5 | <1% | ||
| CVE-2023-20109 | Out-of-Bounds Write in Cisco IOS/IOS XE GET VPN Enables Authenticated RCE | 6.6 | 3% | KEV | KEV |
CVE-2023-20252+2 related CVEs | A vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN Manager Software could allow an unauthenticated, remote attacker… | 9.8 group max | 1% | ||
| CVE-2023-20254 | A vulnerability in the session management system of the Cisco Catalyst SD-WAN Manager multi-tenant feature could allow an authenticated, remote attacker to… | 8.8 | <1% |
From the original article
2 min read at thehackernews.com
Ravie Lakshmanan Sep 29, 2023 Vulnerability / Network Security Cisco is warning of attempted exploitation of a security flaw in its IOS Software and IOS XE Software that could permit an authenticated remote attacker to achieve remote code execution on affected systems. The medium-severity vulnerability is tracked as CVE-2023-20109 , and has a CVSS score of 6. 6.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.