H-ISAC TLP Green Finished Intelligence Report Guidance for Addressing Cisco IOS XE Web UI Vulnerabilities

On November 01, 2023, CISA released Guidance for Addressing Cisco IOS XE Web UI Vulnerabilities. The guidance now notes that Cisco has fixed these vulnerabilities for the 17.3 Cisco IOS XE software release train with version 17.3.8a. Health-ISAC is distributing this report for your situational awareness. 

Widespread exploitation of two vulnerabilities, CVE-2023-20198 and CVE-2023-20273, affecting Cisco’s Internetworking Operating System (IOS) XE Software Web User Interface (UI). Cisco's IOS XE Web UI is a system management tool for IOS XE, which is a network operating system for use on various Cisco products. An unauthenticated remote actor could exploit these vulnerabilities to take control of an affected system. Specifically, these vulnerabilities allow the actor to create a privileged account that provides complete control over the device.