Lucene search
CiscoCVELIST:CVE-2023-20273HistoryOct 24, 2023 - 2:13 p.m.
CVE-2023-20273
2023-10-2414:13:36
cisco
www.cve.org
2
cisco
ios xe software
web ui
vulnerability
remote attacker
command injection
input validation
root privileges
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
8.4 High
AI Score
Confidence
High
0.036 Low
EPSS
Percentile
91.8%
A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of root. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI. A successful exploit could allow the attacker to inject commands to the underlying operating system with root privileges.
CNA Affected
[
{
"vendor": "Cisco",
"product": "Cisco IOS XE Software",
"versions": [
{
"version": "16.1.1",
"status": "affected"
},
{
"version": "16.1.2",
"status": "affected"
},
{
"version": "16.1.3",
"status": "affected"
},
{
"version": "16.2.1",
"status": "affected"
},
{
"version": "16.2.2",
"status": "affected"
},
{
"version": "16.3.1",
"status": "affected"
},
{
"version": "16.3.2",
"status": "affected"
},
{
"version": "16.3.3",
"status": "affected"
},
{
"version": "16.3.1a",
"status": "affected"
},
{
"version": "16.3.4",
"status": "affected"
},
{
"version": "16.3.5",
"status": "affected"
},
{
"version": "16.3.5b",
"status": "affected"
},
{
"version": "16.3.6",
"status": "affected"
},
{
"version": "16.3.7",
"status": "affected"
},
{
"version": "16.3.8",
"status": "affected"
},
{
"version": "16.3.9",
"status": "affected"
},
{
"version": "16.3.10",
"status": "affected"
},
{
"version": "16.3.11",
"status": "affected"
},
{
"version": "16.4.1",
"status": "affected"
},
{
"version": "16.4.2",
"status": "affected"
},
{
"version": "16.4.3",
"status": "affected"
},
{
"version": "16.5.1",
"status": "affected"
},
{
"version": "16.5.1a",
"status": "affected"
},
{
"version": "16.5.1b",
"status": "affected"
},
{
"version": "16.5.2",
"status": "affected"
},
{
"version": "16.5.3",
"status": "affected"
},
{
"version": "16.6.1",
"status": "affected"
},
{
"version": "16.6.2",
"status": "affected"
},
{
"version": "16.6.3",
"status": "affected"
},
{
"version": "16.6.4",
"status": "affected"
},
{
"version": "16.6.5",
"status": "affected"
},
{
"version": "16.6.4a",
"status": "affected"
},
{
"version": "16.6.5a",
"status": "affected"
},
{
"version": "16.6.6",
"status": "affected"
},
{
"version": "16.6.7",
"status": "affected"
},
{
"version": "16.6.8",
"status": "affected"
},
{
"version": "16.6.9",
"status": "affected"
},
{
"version": "16.6.10",
"status": "affected"
},
{
"version": "16.7.1",
"status": "affected"
},
{
"version": "16.7.1a",
"status": "affected"
},
{
"version": "16.7.1b",
"status": "affected"
},
{
"version": "16.7.2",
"status": "affected"
},
{
"version": "16.7.3",
"status": "affected"
},
{
"version": "16.7.4",
"status": "affected"
},
{
"version": "16.8.1",
"status": "affected"
},
{
"version": "16.8.1a",
"status": "affected"
},
{
"version": "16.8.1b",
"status": "affected"
},
{
"version": "16.8.1s",
"status": "affected"
},
{
"version": "16.8.1c",
"status": "affected"
},
{
"version": "16.8.1d",
"status": "affected"
},
{
"version": "16.8.2",
"status": "affected"
},
{
"version": "16.8.1e",
"status": "affected"
},
{
"version": "16.8.3",
"status": "affected"
},
{
"version": "16.9.1",
"status": "affected"
},
{
"version": "16.9.2",
"status": "affected"
},
{
"version": "16.9.1a",
"status": "affected"
},
{
"version": "16.9.1b",
"status": "affected"
},
{
"version": "16.9.1s",
"status": "affected"
},
{
"version": "16.9.3",
"status": "affected"
},
{
"version": "16.9.4",
"status": "affected"
},
{
"version": "16.9.3a",
"status": "affected"
},
{
"version": "16.9.5",
"status": "affected"
},
{
"version": "16.9.5f",
"status": "affected"
},
{
"version": "16.9.6",
"status": "affected"
},
{
"version": "16.9.7",
"status": "affected"
},
{
"version": "16.9.8",
"status": "affected"
},
{
"version": "16.10.1",
"status": "affected"
},
{
"version": "16.10.1a",
"status": "affected"
},
{
"version": "16.10.1b",
"status": "affected"
},
{
"version": "16.10.1s",
"status": "affected"
},
{
"version": "16.10.1c",
"status": "affected"
},
{
"version": "16.10.1e",
"status": "affected"
},
{
"version": "16.10.1d",
"status": "affected"
},
{
"version": "16.10.2",
"status": "affected"
},
{
"version": "16.10.1f",
"status": "affected"
},
{
"version": "16.10.1g",
"status": "affected"
},
{
"version": "16.10.3",
"status": "affected"
},
{
"version": "16.11.1",
"status": "affected"
},
{
"version": "16.11.1a",
"status": "affected"
},
{
"version": "16.11.1b",
"status": "affected"
},
{
"version": "16.11.2",
"status": "affected"
},
{
"version": "16.11.1s",
"status": "affected"
},
{
"version": "16.12.1",
"status": "affected"
},
{
"version": "16.12.1s",
"status": "affected"
},
{
"version": "16.12.1a",
"status": "affected"
},
{
"version": "16.12.1c",
"status": "affected"
},
{
"version": "16.12.1w",
"status": "affected"
},
{
"version": "16.12.2",
"status": "affected"
},
{
"version": "16.12.1y",
"status": "affected"
},
{
"version": "16.12.2a",
"status": "affected"
},
{
"version": "16.12.3",
"status": "affected"
},
{
"version": "16.12.8",
"status": "affected"
},
{
"version": "16.12.2s",
"status": "affected"
},
{
"version": "16.12.1x",
"status": "affected"
},
{
"version": "16.12.1t",
"status": "affected"
},
{
"version": "16.12.4",
"status": "affected"
},
{
"version": "16.12.3s",
"status": "affected"
},
{
"version": "16.12.3a",
"status": "affected"
},
{
"version": "16.12.4a",
"status": "affected"
},
{
"version": "16.12.5",
"status": "affected"
},
{
"version": "16.12.6",
"status": "affected"
},
{
"version": "16.12.1z1",
"status": "affected"
},
{
"version": "16.12.5a",
"status": "affected"
},
{
"version": "16.12.5b",
"status": "affected"
},
{
"version": "16.12.1z2",
"status": "affected"
},
{
"version": "16.12.6a",
"status": "affected"
},
{
"version": "16.12.7",
"status": "affected"
},
{
"version": "16.12.9",
"status": "affected"
},
{
"version": "16.12.10",
"status": "affected"
},
{
"version": "17.1.1",
"status": "affected"
},
{
"version": "17.1.1a",
"status": "affected"
},
{
"version": "17.1.1s",
"status": "affected"
},
{
"version": "17.1.1t",
"status": "affected"
},
{
"version": "17.1.3",
"status": "affected"
},
{
"version": "17.2.1",
"status": "affected"
},
{
"version": "17.2.1r",
"status": "affected"
},
{
"version": "17.2.1a",
"status": "affected"
},
{
"version": "17.2.1v",
"status": "affected"
},
{
"version": "17.2.2",
"status": "affected"
},
{
"version": "17.2.3",
"status": "affected"
},
{
"version": "17.3.1",
"status": "affected"
},
{
"version": "17.3.2",
"status": "affected"
},
{
"version": "17.3.3",
"status": "affected"
},
{
"version": "17.3.1a",
"status": "affected"
},
{
"version": "17.3.1w",
"status": "affected"
},
{
"version": "17.3.2a",
"status": "affected"
},
{
"version": "17.3.1x",
"status": "affected"
},
{
"version": "17.3.1z",
"status": "affected"
},
{
"version": "17.3.4",
"status": "affected"
},
{
"version": "17.3.5",
"status": "affected"
},
{
"version": "17.3.4a",
"status": "affected"
},
{
"version": "17.3.6",
"status": "affected"
},
{
"version": "17.3.4b",
"status": "affected"
},
{
"version": "17.3.4c",
"status": "affected"
},
{
"version": "17.3.5a",
"status": "affected"
},
{
"version": "17.3.5b",
"status": "affected"
},
{
"version": "17.3.7",
"status": "affected"
},
{
"version": "17.3.8",
"status": "affected"
},
{
"version": "17.4.1",
"status": "affected"
},
{
"version": "17.4.2",
"status": "affected"
},
{
"version": "17.4.1a",
"status": "affected"
},
{
"version": "17.4.1b",
"status": "affected"
},
{
"version": "17.4.2a",
"status": "affected"
},
{
"version": "17.5.1",
"status": "affected"
},
{
"version": "17.5.1a",
"status": "affected"
},
{
"version": "17.5.1b",
"status": "affected"
},
{
"version": "17.5.1c",
"status": "affected"
},
{
"version": "17.6.1",
"status": "affected"
},
{
"version": "17.6.2",
"status": "affected"
},
{
"version": "17.6.1w",
"status": "affected"
},
{
"version": "17.6.1a",
"status": "affected"
},
{
"version": "17.6.1x",
"status": "affected"
},
{
"version": "17.6.3",
"status": "affected"
},
{
"version": "17.6.1y",
"status": "affected"
},
{
"version": "17.6.1z",
"status": "affected"
},
{
"version": "17.6.3a",
"status": "affected"
},
{
"version": "17.6.4",
"status": "affected"
},
{
"version": "17.6.1z1",
"status": "affected"
},
{
"version": "17.6.5",
"status": "affected"
},
{
"version": "17.6.6",
"status": "affected"
},
{
"version": "17.7.1",
"status": "affected"
},
{
"version": "17.7.1a",
"status": "affected"
},
{
"version": "17.7.1b",
"status": "affected"
},
{
"version": "17.7.2",
"status": "affected"
},
{
"version": "17.10.1",
"status": "affected"
},
{
"version": "17.10.1a",
"status": "affected"
},
{
"version": "17.10.1b",
"status": "affected"
},
{
"version": "17.8.1",
"status": "affected"
},
{
"version": "17.8.1a",
"status": "affected"
},
{
"version": "17.9.1",
"status": "affected"
},
{
"version": "17.9.1w",
"status": "affected"
},
{
"version": "17.9.2",
"status": "affected"
},
{
"version": "17.9.1a",
"status": "affected"
},
{
"version": "17.9.1x",
"status": "affected"
},
{
"version": "17.9.1y",
"status": "affected"
},
{
"version": "17.9.3",
"status": "affected"
},
{
"version": "17.9.2a",
"status": "affected"
},
{
"version": "17.9.1x1",
"status": "affected"
},
{
"version": "17.9.3a",
"status": "affected"
},
{
"version": "17.9.4",
"status": "affected"
},
{
"version": "17.9.1y1",
"status": "affected"
},
{
"version": "17.11.1",
"status": "affected"
},
{
"version": "17.11.1a",
"status": "affected"
},
{
"version": "17.12.1",
"status": "affected"
},
{
"version": "17.12.1a",
"status": "affected"
},
{
"version": "17.11.99SW",
"status": "affected"
}
]
}
]Related
cnvd
cnvd
Command Injection Vulnerability in Cisco IOS XE
2023-10-27 00:00:00
nvd
nvd
CVE-2023-20273
2023-10-25 18:17:23
CVE-2023-20198
2023-10-16 16:15:10
prion
prion
Input validation
2023-10-25 18:17:00
Command injection
2023-10-16 16:15:00
cve
cve
CVE-2023-20273
2023-10-25 18:17:23
CVE-2023-20198
2023-10-16 16:15:10
githubexploit
githubexploit
Exploit for OS Command Injection in Cisco Ios Xe
2023-12-09 07:25:43
attackerkb
attackerkb
CVE-2023-20273
2023-10-25 00:00:00
CVE-2023-20198
2023-10-16 00:00:00
cvelist
cvelist
CVE-2023-20198
2023-10-16 15:12:58
cisco
cisco
Multiple Vulnerabilities in Cisco IOS XE Software Web UI Feature
2023-10-16 15:00:00
metasploit
metasploit
Cisco IOX XE unauthenticated OS command execution
2023-11-03 15:38:35
Cisco IOX XE Unauthenticated RCE Chain
2023-11-06 17:12:40
zdt
zdt
Cisco IOX XE unauthenticated OS Command Execution Exploit
2023-11-10 00:00:00
Cisco IOX XE Unauthenticated Remote Code Execution Chain Exploit
2023-11-10 00:00:00
thn
thn
Backdoor Implanted on Hacked Cisco Devices Modified to Evade Detection
2023-10-24 06:33:00
ics
ics
Rockwell Automation Stratix 5800 and Stratix 5200 (Update A)
2023-11-21 12:00:00
nessus
nessus
packetstorm
packetstorm
Cisco IOX XE Unauthenticated Remote Code Execution
2023-11-14 00:00:00
talosblog
talosblog
cisa_kev
cisa_kev
Cisco IOS XE Web UI Command Injection Vulnerability
2023-10-23 00:00:00
rapid7blog
rapid7blog
CVE-2023-20198: Active Exploitation of Cisco IOS XE Zero-Day Vulnerability
2023-10-17 19:50:03
Metasploit Weekly Wrap-Up
2023-11-10 18:59:55
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
8.4 High
AI Score
Confidence
High
0.036 Low
EPSS
Percentile
91.8%
Related for CVELIST:CVE-2023-20273