CVE-2023-20198

Cisco IOS XE Web UI Privilege Escalation Vulnerability

Allen-Bradley Stratix 5200 Firmware

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating the list of fixed releases and adding the Software Checker. Our investigation has determined that the actors exploited two previously unknown issues. The attacker first exploited CVE-2023-20198 to gain initial access and issued a privilege 15 command to create a local user and password combination. This allowed the user to log…

16. Okt 2023

Ausgewertete Quellen

• Hersteller
  https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-20198
• CISA
  Cisco IOS XE Web UI Privilege Escalation Vulnerability
• NVD
  CVE-2023-20198