Vulnerabilities CVE-2023-20198

CVE-2023-20198

Medium

Open

KEV

TLP:CLEAR

Cisco IOS XE Web UI Privilege Escalation Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Cisco — IOS XE Web UI — Cisco IOS XE Web UI contains a privilege escalation vulnerability in the web user interface that could allow a remote, unauthenticated attacker to create an account with privilege level 15 access. The attacker can then use that account to gain control of the affected device.

Details

EPSS Score ⓘ: 99.57%

99.9th percentile
Confidence: 100%
CISA KEV
Date Added: Oct 16, 2023
Patch Due: Oct 20, 2023
Required Action: Verify that instances of Cisco IOS XE Web UI are in compliance with BOD 23-02 and apply mitigations per vendor instructions. For affected products (Cisco IOS XE Web UI exposed to the internet or to untrusted networks), follow vendor instructions to determine if a system may have been compromised and immediately report positive findings to CISA.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.