CVE-2023-20273
HIGH KEVCisco IOS XE - Authenticated OS Command Injection via Web UI
Title source: llmExploitation Summary
CVE-2023-20273 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added October 23, 2023. EIP tracks 1 public exploit from researchers including smokeintheshell.
AI-analyzed exploit summary This is a functional exploit PoC for CVE-2023-20273, targeting Cisco IOS XE devices. It leverages command injection via a vulnerable REST API endpoint to achieve remote code execution (RCE) and can deliver either direct commands or a reverse shell.
Description
A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of root. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI. A successful exploit could allow the attacker to inject commands to the underlying operating system with root privileges.
Exploits (1)
This is a functional exploit PoC for CVE-2023-20273, targeting Cisco IOS XE devices. It leverages command injection via a vulnerable REST API endpoint to achieve remote code execution (RCE) and can deliver either direct commands or a reverse shell.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H