Description

Due to CVE-2023-20198, cybercriminals installed an implant on the Cisco IOS. The implant gives full access to the system for anonymous users.

Remediation

Check Web References.

References

Cisco IOS XE Software Web UI Privilege Escalation Vulnerability

Active exploitation of Cisco IOS XE Software Web Management User Interface vulnerability

Related Vulnerabilities

WordPress Plugin Analytics Remote Code Execution (1.7)

WordPress Plugin Loco Translate PHP Code Injection (2.5.3)

WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress PHP Code Injection (3.6.10)

Server-side JavaScript injection

timthumb.php remote code execution

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Tags

Code Execution Malware CWE-912 CVE-2023-20198