Description
Cisco IOS XE Web UI存在任意用户创建漏洞，攻击者能够在受影响的设备上创建账户，并完全控制这个账户
Cisco IOS XE 未授权创建管理员漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://avd.aliyun.com/detail?id=AVD-2023-20198
https://zone.ci/aliyun/ali_highrisk/10781.html
https://cloud.tencent.com/developer/article/2359262
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/Cisco/Cisco%20IOS%20XE%20CVE-2023-20198%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87%E6%BC%8F%E6%B4%9E.md
https://ti.qianxin.com/vulnerability/notice-detail/731
https://security.zone.ci/vulns/msec/307896.html
https://blog.nsfocus.net/cisco-ios-xe-web-uicve-2023-20198/
https://blog.talosintelligence.com/active-exploitation-of-cisco-ios-xe-software/
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-iosxe-webui-privesc-su7scvdp.html