PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Cisco IOS XE CVE-2023-20198 and CVE-2023-20273: WebUI Internals, Patch Diffs, and Theory Crafting

horizon3.ai | vulnerability | CVE-2023-20198 | #vulnerability-research | #exploit | #cisco
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Cisco IOS XE CVE-2023-20198 technical deep-dive, WebUI internals, patch diffing, and exploit theory crafting.
CVE
CVE-2023-20198
Published
Collected

Related coverage

vulnerability · horizon3.ai
Cisco IOS XE CVE-2023-20198: Deep Dive and POC
Previously, we explored the patch for CVE-2023-20273 and CVE-2023-20198 affecting Cisco IOS XE and identified some likely vectors an attacker might have used to exploit these vulnerabilities.
vulnerability · horizon3.ai
Cisco IOS XE Web UI Vulnerability: A Glimpse into CVE-2023-20198
On 16 October, Cisco reported a critical zero-day vulnerability in the web UI feature of its IOS XE software actively being exploited.
vulnerability · horizon3.ai
Apache CVE-2021-41773, CVE-2021-42013
We wanted to do something a little bit different with this post. Our vulnerability disclosures, exploit proof-of-concepts, and attack analysis blog posts have…
vulnerability · horizon3.ai
POC CVE-2021-21972
Write the file supplied in the –file argument to the location specified in the –path argument. The file will be written in the context of the vsphere-ui user.
vulnerability · volexity.com
Virtual Private Keylogging: Cisco Web VPNs Leveraged for Access and Persistence
In the world of information security, there is never a dull moment. Part of the fun of working in this space is that you always get to see attackers do […]
vulnerability · horizon3.ai
The Quiet Attack Path
See how attackers quietly exploit AD through enumeration, Kerberoasting, and AS-REP roasting—and why most SIEM and EDR tools fail to catch it.
Back