Cisco Releases Update for IOS XE Flaws

Cisco has released updates to address a pair of vulnerabilities in its IOS XE software that attackers have been exploiting widely for several days.

One of the vulnerabilities (CVE-2023-20198) was first identified a week ago and Cisco released an advisory warning customers that it was being actively exploited. Threat actors have been exploiting the bug, which is an issue in the web UI, to install malware on target devices. The flaw is exploitable without authentication and enables an attacker to …

actively exploited address advisory attackers cisco customers cve cve-2023-20198 exploited exploiting flaws ios ios xe releases software threat threat actors update updates vulnerabilities warning week