Cisco IOS XE web UI zero-days: implants on tens of thousands of devices ยท updates https://pwn.watch/i/cisco-ios-xe-web-ui-implants-cve-2023-20198 Attackers chained two zero-days in the Cisco IOS XE web UI. CVE-2023-20198 let them create a privilege-15 account, and CVE-2023-20273 let them write a root-level implant. Internet scans soon found implants on tens of thousands of switches and routers. en Mon, 23 Oct 2023 00:00:00 GMT Cisco IOS XE web UI zero-days: implants on tens of thousands of devices: CISA adds CVE-2023-20273 to the KEV catalog https://pwn.watch/i/cisco-ios-xe-web-ui-implants-cve-2023-20198 https://pwn.watch/i/cisco-ios-xe-web-ui-implants-cve-2023-20198#2023-10-23-96ee5224 Mon, 23 Oct 2023 00:00:00 GMT critical <p>Cisco IOS XE web UI zero-days: implants on tens of thousands of devices: CISA adds CVE-2023-20273 to the KEV catalog</p> Cisco IOS XE web UI zero-days: implants on tens of thousands of devices: First fixed release, 17.9.4a, published https://pwn.watch/i/cisco-ios-xe-web-ui-implants-cve-2023-20198 https://pwn.watch/i/cisco-ios-xe-web-ui-implants-cve-2023-20198#2023-10-22-cb590fd2 Sun, 22 Oct 2023 00:00:00 GMT critical <p><a href="https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-iosxe-webui-privesc-j22SaA4z.html">Source</a></p> Cisco IOS XE web UI zero-days: implants on tens of thousands of devices: Cisco discloses the second bug (CVE-2023-20273) used to write the implant as root https://pwn.watch/i/cisco-ios-xe-web-ui-implants-cve-2023-20198 https://pwn.watch/i/cisco-ios-xe-web-ui-implants-cve-2023-20198#2023-10-20-90c6566f Fri, 20 Oct 2023 00:00:00 GMT critical <p>Cisco IOS XE web UI zero-days: implants on tens of thousands of devices: Cisco discloses the second bug (CVE-2023-20273) used to write the implant as root</p> Cisco IOS XE web UI zero-days: implants on tens of thousands of devices: Cisco advisory and Talos write-up on active exploitation; CISA adds CVE-2023-20198 to KEV https://pwn.watch/i/cisco-ios-xe-web-ui-implants-cve-2023-20198 https://pwn.watch/i/cisco-ios-xe-web-ui-implants-cve-2023-20198#2023-10-16-5b3271c5 Mon, 16 Oct 2023 00:00:00 GMT critical <p><a href="https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z">Source</a></p> Cisco IOS XE web UI zero-days: implants on tens of thousands of devices: Earliest malicious activity found by Cisco Talos https://pwn.watch/i/cisco-ios-xe-web-ui-implants-cve-2023-20198 https://pwn.watch/i/cisco-ios-xe-web-ui-implants-cve-2023-20198#2023-09-18-a89876f1 Mon, 18 Sep 2023 00:00:00 GMT critical <p><a href="https://blog.talosintelligence.com/active-exploitation-of-cisco-ios-xe-software/">Source</a></p>