Description
Cisco IOS XE Software是美国思科（Cisco）公司的一个操作系统。用于企业有线和无线访问，汇聚，核心和WAN的单一操作系统，Cisco IOS XE降低了业务和网络的复杂性。 Cisco IOS XE Software存在安全漏洞，该漏洞源于输入验证不足，导致攻击者可以通过web UI功能使用root权限注入命令。
Cisco IOS XE Software 安全漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.cisco.com/c/en/us/support/ios-nx-os-software/ios-xe-17/products-security-advisories-list.html
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z
https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alert_Announcements/3591cceb-ffa4-4ee1-a0bc-60ef7dad8479/
https://www.hkcert.org/tc/security-bulletin/cisco-ios-xe-multiple-vulnerabilities_20260326
https://www.twcert.org.tw/tw/cp-169-10410-5dfbf-1.html
https://blog.talosintelligence.com/active-exploitation-of-cisco-ios-xe-software/
https://nvd.nist.gov/vuln/detail/CVE-2023-20198