Severity
High
Analysis Summary
CVE-2023-20273
Cisco IOS XE could allow a remote authenticated attacker to gain elevated privileges on the system, caused by the active exploitation of a previously unknown vulnerability in the web UI feature. An attacker could exploit this vulnerability to create an account on an affected system with privilege level 15 access and then use that account to gain control of the affected system.
Impact
- Privilege Escalation
Indicators Of Compromise
CVE
- CVE-2023-20273
Affected Vendors
Cisco
Affected Products
- Cisco IOS XE Software
Remediation
Refer to Cisco Security Advisory for patch, upgrade or suggested workaround information.