← العودة للجدول
CVE-2023-20198
CVE-2023-20198 — Cisco is providing an update for the ongoing investigation into observed exploit
📅 2023-10-16
🔴 Critical 🔥 Yes NVD Exploit Cisco CVSS 10 🎯 EPSS 94.01%

📋 الوصف الكامل

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating the list of fixed releases and adding the Software Checker. Our investigation has determined that the actors exploited two previously unknown issues. The attacker first exploited CVE-2023-20198 to gain initial access and issued a privilege 15 command

💻 الأنظمة المتأثرة

Cisco IOS XE 17.x

⚠️ نوع التهديد

Exploit

🔗 CVE ID

CVE-2023-20198

📡 المصدر

NVD

✅ الحلول والتخفيف

Cisco Security Advisory

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ←