Date：2023/10/23

【Vulnerability Warning】Cisco IOS XE exists a high-risk security vulnerability (CVE-2023-20198), please refer to the official recommended measures as soon as possible

Subject: Cisco IOS XE exists a high-risk security vulnerability (CVE-2023-20198), which allows remote attackers to gain control of the affected system without authentication. Please refer to the official recommended measures as soon as possible

Description:
For details, please refer to the following links.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z

https://nvd.nist.gov/vuln/detail/CVE-2023-20198

https://arstechnica.com/security/2023/10/actively-exploited-cisco-0-day-with-maximum-10-severity-gives-full-network-control/

https://www.darkreading.com/vulnerabilities-threats/critical-unpatched-cisco-zero-day-bug-active-exploit

https://www.ithome.com.tw/news/159338

Network System Division
Computer and Communication Center