Cisco Releases Security Advisory for IOS XE Software Web UI

Cisco released a security advisory to address a vulnerability (CVE-2023-20198) affecting IOS XE Software Web UI. A cyber threat actor can exploit this vulnerability to take control of an affected device.

CISA encourages users and administrators to review the Cisco security advisory, apply the necessary recommendations, hunt for any malicious activity and report any positive findings to CISA, and apply patches when made available.

See the following for additional guidance and resources: 

• BOD 23-02: Mitigating the Risk from Internet-Exposed Management Interfaces

• Known Exploited Vulnerabilities Catalog