漏洞描述 Cisco IOS XE是美国思科（Cisco）公司的一个操作系统。用于企业有线和无线访问，汇聚，核心和WAN的单一操作系统，Cisco IOS XE降低了业务和网络的复杂性。 Cisco IOS XE存在访问控制错误漏洞，该漏洞源于访问控制列表编程不当，可能导致未经验证的远程攻击者绕过配置的ACL。
相关漏洞推荐 CVE-2023-20198: Cisco IOS XE Web UI - Command Injection POC 2025-08-01 | Cisco IOS XE A vulnerability in the web UI component of Cisco IOS XE Software could allow an unauthenticated, rem... CVE-2025-20188: Cisco IOS XE WLC - Arbitrary File Upload POC 2025-08-01 | Cisco IOS XE WLC A vulnerability in the Out-of-Band Access Point (AP) Image Download feature of Cisco IOS XE Software... cisco-implant-detect: Cisco IOS XE - Impant Detection POC 2025-08-01 | Cisco IOS XE Cisco is aware of active exploitation of a previously unknown vulnerability in the web UI feature of...