Description
Cisco IOS XE Web UI存在权限提升漏洞，此漏洞是由于访问控制不当导致的。
Cisco IOS XE Web UI CVE-2023-20198 权限提升漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z
https://www.cisa.gov/guidance-addressing-cisco-ios-xe-web-ui-vulnerabilities
https://nvd.nist.gov/vuln/detail/cve-2023-20198
https://blog.talosintelligence.com/active-exploitation-of-cisco-ios-xe-software/
https://github.com/G4sul1n/Cisco-IOS-XE-CVE-2023-20198
https://www.cisco.com/c/zh_cn/support/docs/ios-nx-os-software/ios-xe-17/221144-cisco-tac-technical-faqs-for-cisco-ios-x.html
https://community.cisco.com/t5/wireless/cve-2023-20198-software-web-ui-privilege-escalation/td-p/4942338
https://unit42.paloaltonetworks.com/threat-brief-cve-2023-20198-cisco-ios-xe/