Exploit / PoCcritical

Cisco IOS XE zero-day exploited by attackers to deliver implant (CVE-2023-20198)

Help Net Securityby @zeljkazorzOct 31, 2023 · 10:28 UTC (Oct 31, 2023)4 min read3 · 2 reads

Read at helpnetsecurity.com

Analyze CVE-2023-20198 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-20198 CVE-2021-1435

Tags: cve-2023-20198 cve-2021-1435 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-1435	A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to inject arbitrary commands that can be executed as the…	7.2	8%		Mar 24, 2021
CVE-2023-20198	Unauthenticated Privilege Escalation in Cisco IOS XE Web UI (Actively Exploited)	10.0	100%	KEV	Oct 16, 2023 KEV Oct 16, 2023

From the original article

4 min read at helpnetsecurity.com

A previously unknown vulnerability (CVE-2023-20198) affecting networking devices running Cisco IOS XE software is being exploited by a threat actor to take control of the devices and install an implant, Cisco Talos researchers have warned today.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.