Experts released PoC exploit code for Cisco IOS XE flaw CVE-2023-20198

Researchers publicly released the exploit code for the critical Cisco IOS XE vulnerability tracked as CVE-2023-20198.

Shadowserver on X: Cisco CVE-2023-20198 exploitation activity: We see over 32.8K Cisco IOS XE IPs compromised with implants based on the check published by Cisco in IP data on implants shared

CVE-2023-20198 Detection: Cisco IOS XE Zero-Day Vulnerability Actively Exploited to Install Implants - SOC Prime

GreyNoise Intelligence

Multiple experts released exploits for Linux local privilege escalation flaw Looney Tunables

Cisco IOS XE CVE-2023-20198 and CVE-2023-20273: WebUI Internals, Patch Diffs, and Theory Crafting –

Active Exploitation of Big-IP and Citrix vulnerabilities observed by Cyble Global Sensor Intelligence Network — Cyble

Cisco IOS XE Web UI Privilege Escalation Vulnerability; Sandworm Targets Ukrainian Telecom

PoC Exploit Released for Critical Fortinet Auth Bypass Bug Under Active Attacks

Risky Biz News: Cisco IOS XE hackers are hiding their tracks as patches come out

Shielding Infrastructure from Cisco Zero-Day Exploits with Enclave

zero-Day Archives - Security Affairs