Rewterz Threat Advisory – CVE-2023-20198 – Zero-Day Cisco IOS XE Vulnerability Exploit in the Wild

Severity

High

Analysis Summary

CVE-2023-20198

Cisco IOS XE could allow a remote attacker to gain elevated privileges on the system, caused by active exploitation of a previously unknown vulnerability in the web UI feature. An attacker could exploit this vulnerability to create an account on an affected system with privilege level 15 access and then use that account to gain control of the affected system.

Impact

• Privilege Escalation

Indicators Of Compromise

CVE

• CVE-2023-20198

Affected Vendors

Cisco

Affected Products

• Cisco IOS XE Software

Remediation

Refer to Cisco Security Advisory for patch, upgrade or suggested workaround information. 

Cisco Security Advisory