{"id":1192946,"date":"2023-10-16T16:31:47","date_gmt":"2023-10-16T20:31:47","guid":{"rendered":"https:\/\/www.prime-wow.com\/?p=1192946"},"modified":"2023-10-16T16:31:47","modified_gmt":"2023-10-16T20:31:47","slug":"actively-exploited-cisco-0-day-with-maximum-10-severity-gives-full-network-control","status":"publish","type":"post","link":"https:\/\/www.prime-wow.com\/?p=1192946","title":{"rendered":"Actively exploited Cisco 0-day with maximum 10 severity gives full network control"},"content":{"rendered":"<div id=\"rss-wrap\">\n<figure class=\"intro-image intro-left\">\n  <img decoding=\"async\" src=\"https:\/\/www.prime-wow.com\/wp-content\/uploads\/2023\/10\/cisco-data-switch-800x513-1.jpg\" alt=\"Cables run into a Cisco data switch.\" \/><\/p>\n<p class=\"caption\" style=\"font-size:0.8em\"><a href=\"https:\/\/cdn.arstechnica.net\/wp-content\/uploads\/2023\/10\/cisco-data-switch.jpg\" class=\"enlarge-link\" data-height=\"657\" data-width=\"1024\">Enlarge<\/a> <span class=\"sep\">\/<\/span> Cables run into a Cisco data switch. (credit: Getty Images)<\/p>\n<\/figure>\n<div><a name=\"page-1\" \/><\/div>\n<p>Cisco is urging customers to protect their devices following the discovery of a critical, actively exploited zero-day vulnerability that\u2019s giving threat actors full administrative control of networks.<\/p>\n<p>\u201cSuccessful exploitation of this vulnerability allows an attacker to create an account on the affected device with privilege level 15 access, effectively granting them full control of the compromised device and allowing possible subsequent unauthorized activity,\u201d members of Cisco\u2019s Talos security team <a href=\"https:\/\/blog.talosintelligence.com\/active-exploitation-of-cisco-ios-xe-software\/\">wrote Monday<\/a>. \u201cThis is a critical vulnerability, and we strongly recommend affected entities immediately implement the steps outlined in Cisco\u2019s PSIRT advisory.\u201d<\/p>\n<h2>Under exploitation for 4 weeks<\/h2>\n<p>The previously unknown vulnerability, which is tracked as CVE-2023-20198, carries the maximum severity rating of 10. It resides in the Web User Interface of Cisco IOS XE software when exposed to the Internet or untrusted networks. Any switch, router, or wireless LAN controller running IOS XE that has the HTTP or HTTPS Server feature enabled and exposed to the Internet is vulnerable. At the time this post went live, the Shodan search engine showed that as many as 80,000 Internet-connected devices could be affected.<\/p>\n<\/div>\n<p><a href=\"https:\/\/arstechnica.com\/?p=1976348#p3\">Read 7 remaining paragraphs<\/a> | <a href=\"https:\/\/arstechnica.com\/?p=1976348&amp;comments=1\">Comments<\/a><\/p>\n<p>&#013;<br \/>\n&#013;<br \/>\nSource: Ars Technica &#8211; <a href=\"https:\/\/arstechnica.com\/?p=1976348\" target=\"_blank\" rel=\"noopener\">Actively exploited Cisco 0-day with maximum 10 severity gives full network control<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Enlarge \/ Cables run into a Cisco data switch. (credit: Getty Images) Cisco is urging customers to protect their devices following the discovery of a critical, actively exploited zero-day vulnerability that\u2019s giving threat actors full administrative control of networks. \u201cSuccessful &hellip; <a href=\"https:\/\/www.prime-wow.com\/?p=1192946\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":1192947,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[27,110],"tags":[73],"class_list":["post-1192946","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ars-technica","category-unfiltered-rss","tag-ars-technica"],"_links":{"self":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts\/1192946","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1192946"}],"version-history":[{"count":0,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts\/1192946\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/media\/1192947"}],"wp:attachment":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1192946"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1192946"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1192946"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}