Boletines de Vulnerabilidades

Multiple Vulnerabilities in Cisco IOS XE Software Web UI Feature


Información sobre el sistema

   
Software afectado Cisco

Descripción

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are providing availability of Software Maintenance Upgrade (SMU) files. Cisco will update the advisory as additional releases post to Cisco Software Download Center. Fix information can be found in the Fixed Software section of this advisory. Our investigation has determined that the actors exploited two previously unknown issues. The attacker first exploited

More info:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Multiple%20Vulnerabilities%20in%20Cisco%20IOS%20XE%20Software%20Web%20UI%20Feature&vs_k=1

Identificadores estándar

Propiedad Valor
CVE CVE-2023-20198 and CVE-2023-20273.

Histórico de versiones

Versión Comentario Data
Ministerio de Defensa
CNI
CCN
CCN-CERT