Cisco IOS and IOS XE: Group Encrypted Transport VPN Out-of-Bounds Write (CVE-2023-20109) ยท updates https://pwn.watch/i/cisco-ios-and-ios-xe-cve-2023-20109 Cisco IOS and IOS XE contain an out-of-bounds write vulnerability in the Group Encrypted Transport VPN (GET VPN) feature that could allow an authenticated, remote attacker who has administrative control of either a group member or a key server to execute malicious code or cause a device to crash. Added to CISA KEV on 2023-10-10. en Tue, 10 Oct 2023 00:00:00 GMT Cisco IOS and IOS XE: Group Encrypted Transport VPN Out-of-Bounds Write (CVE-2023-20109): CISA added CVE-2023-20109 to the KEV catalog (due 2023-10-31). https://pwn.watch/i/cisco-ios-and-ios-xe-cve-2023-20109 https://pwn.watch/i/cisco-ios-and-ios-xe-cve-2023-20109#2023-10-10-bbc57d2d Tue, 10 Oct 2023 00:00:00 GMT medium <p>Cisco IOS and IOS XE: Group Encrypted Transport VPN Out-of-Bounds Write (CVE-2023-20109): CISA added CVE-2023-20109 to the KEV catalog (due 2023-10-31).</p>