Description

Due to CVE-2023-20198, cybercriminals installed an implant on the Cisco IOS. The implant gives full access to the system for anonymous users.

Remediation

Check Web References.

References

Cisco IOS XE Software Web UI Privilege Escalation Vulnerability

Active exploitation of Cisco IOS XE Software Web Management User Interface vulnerability

Related Vulnerabilities

Drupal Core 8.9.0 Remote Code Execution (8.9.0)

WordPress Plugin Ajax Search Lite Remote Command Execution (3.1)

PHP preg_replace used on user input

WordPress caching plugins PHP code execution

Drupal REST Remote Code Execution

Severity

Critical

Classification

CVE-2023-20198 CWE-912 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Tags

Code Execution Malware