auxiliary/admin/http/cisco_ios_xe_os_exec_cve_2023_20273

functional

Cisco IOX XE unauthenticated OS command execution

view exploit source metasploittype auxiliarypublished 2023-10-16catalog metasploit

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2023-20273US	high7.2OT critical	92.9% (100th)	KEV	2023-10-25
A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of root. This vulnerability is d…
CVE-2023-20198US	critical10.0OT critical	99.6% (100th)	KEV	2023-10-16
Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating the list of fixed releases and…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.