ClosedPatched
Day · Oct 23, 2023
Cisco IOS XE web UI zero-days: implants on tens of thousands of devices
Cisco IOS XE Software (web UI)
Updates on Oct 23, 2023
CISA adds CVE-2023-20273 to the KEV catalog
Summary
Attackers chained two zero-days in the Cisco IOS XE web UI. CVE-2023-20198 let them create a privilege-15 account, and CVE-2023-20273 let them write a root-level implant. Internet scans soon found implants on tens of thousands of switches and routers.
Read the full incident →