Description

Due to CVE-2023-20198, cybercriminals installed an implant on the Cisco IOS. The implant gives full access to the system for anonymous users.

Remediation

Check Web References.

References

Cisco IOS XE Software Web UI Privilege Escalation Vulnerability

Active exploitation of Cisco IOS XE Software Web Management User Interface vulnerability

Related Vulnerabilities

Argument Injection

Ektron CMS multiple vulnerabilities

WordPress Plugin Newsletter Subscription Form Possible Remote Code Execution (1.1.2)

Ruby on Rails weak/known secret token

Drupal Core 8.5.0 Remote Code Execution (8.5.0)

Severity

Critical

Classification

CVE-2023-20198 CWE-912 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Tags

Code Execution Malware