WID-SEC-W-2023-2510

DeutschShown in its original language — a full translation is planned for a future version.

Cisco IOS: Mehrere Schwachstellen

view advisory published 2023-09-27

Ein Angreifer kann mehrere Schwachstellen in Cisco IOS und Cisco IOS XE ausnutzen, um seine Rechte zu erweitern, einen Denial of Service zu verursachen, Dateien zu manipulieren oder Informationen offenzulegen.

describes (2)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-20186US	critical9.1	0.78% (56th)	—	2023-09-27
A vulnerability in the Authentication, Authorization, and Accounting (AAA) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to…
CVE-2023-20109US	medium6.6OT critical	2.48% (84th)	KEV	2023-09-27
A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker who has a…

references

External citations — patches, advisories, analysis.

Cisco Security Advisory vom 2023-09-27external
Cisco Security Advisory vom 2023-09-27external
WID-SEC-W-2023-2510 - CSAF Versionself
WID-SEC-2023-2510 - Portal Versionself
CISA Known Exploited Vulnerabilities Catalog vom 2023-10-10external

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan