Main
Vulnerability Database
Exploits
ID:9436 - Exploit for Improper Privilege Management in Cisco IOS XE - CVE-2023-20273
ID:9436 - Exploit for Improper Privilege Management in Cisco IOS XE - CVE-2023-20273
Published: December 18, 2023
Vulnerability identifier: #VU82295
Vulnerability risk: High
CVE-ID: CVE-2023-20273
CWE-ID: CWE-269
Exploitation vector: Local access
Vulnerable software:
Cisco IOS XE
Cisco IOS XE
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to compromise the affected system.
The vulnerability exists due to improper privilege management in the web UI feature. A remote non-authenticated attacker can send a specially crafted HTTP request to the affected device and create an account with privilege level 15 access.
Note, the vulnerability is being actively exploited in the wild.
Remediation
Install update from vendor's website.