Vulnerabilities CVE-2023-20273

CVE-2023-20273

Medium

Open

KEV

TLP:CLEAR

Cisco IOS XE Web UI Command Injection Vulnerability

NVD CVE.org

Critical Infrastructure Backdoor / C2

AI Analysis

No AI analysis yet.

Description

Cisco — Cisco IOS XE Web UI — Cisco IOS XE contains a command injection vulnerability in the web user interface. When chained with CVE-2023-20198, the attacker can leverage the new local user to elevate privilege to root and write the implant to the file system. Cisco identified CVE-2023-20273 as the vulnerability exploited to deploy the implant. CVE-2021-1435, previously associated with the exploitation events, is no longer believed to be related to this activity.

Details

EPSS Score ⓘ: 89.63%

99.8th percentile
Confidence: 100%
CISA KEV
Date Added: Oct 23, 2023
Patch Due: Oct 27, 2023
Required Action: Verify that instances of Cisco IOS XE Web UI are in compliance with BOD 23-02 and apply mitigations per vendor instructions. For affected products (Cisco IOS XE Web UI exposed to the internet or to untrusted networks), follow vendor instructions to determine if a system may have been compromised and immediately report positive findings to CISA.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.