LIVE MONITORING
Critical Zero-Day CVE-2023-20198

High: Cisco IOS XE Web UI Exploitation

Affected Systems

Cisco IOS XE with Web UI enabled

A maximum severity vulnerability in Cisco IOS XE allows unauthenticated attackers to create admin accounts on affected devices. Over 50,000 devices were compromised within days of disclosure.

Mitigation Steps

  1. Disable HTTP/HTTPS server on IOS XE devices
  2. Apply Cisco patches
  3. Check for unauthorized admin accounts