Vulnerabilities CVE-2023-20109

CVE-2023-20109

Medium

Open

KEV

TLP:CLEAR

Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Cisco — IOS and IOS XE — Cisco IOS and IOS XE contain an out-of-bounds write vulnerability in the Group Encrypted Transport VPN (GET VPN) feature that could allow an authenticated, remote attacker who has administrative control of either a group member or a key server to execute malicious code or cause a device to crash.

Details

EPSS Score ⓘ: 2.34%

82.1th percentile
Confidence: 100%
CISA KEV
Date Added: Oct 10, 2023
Patch Due: Oct 31, 2023
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.