References https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z https://nvd.nist.gov/vuln/detail/CVE-2023-20198 https://blog.nsfocus.net/cisco-ios-xe-web-uicve-2023-20198/ https://ti.qianxin.com/vulnerability/notice-detail/731 https://www.cisco.com/c/zh_cn/support/docs/ios-nx-os-software/ios-xe-17/221144-cisco-tac-technical-faqs-for-cisco-ios-x.html https://www.cisa.gov/guidance-addressing-cisco-ios-xe-web-ui-vulnerabilities https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/Cisco/Cisco%20IOS%20XE%20CVE-2023-20198%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87%E6%BC%8F%E6%B4%9E.md https://unit42.paloaltonetworks.com/threat-brief-cve-2023-20198-cisco-ios-xe/ https://thesmartshadow.medium.com/cve-2023-20198-unauthenticated-privilege-escalation-in-cisco-ios-xe-web-ui-d68f643cc5e9 https://github.com/G4sul1n/Cisco-IOS-XE-CVE-2023-20198
Related VulnerabilitiesCisco ISE /admin/files-upload/ 文件上传漏洞(CVE-2025-20282)PoCCVE-2025-20282: Cisco ISE < 3.4P2 - Unauthenticated Arbitrary File Upload思科系统(中国)网络技术有限公司Cisco AP WebUI存在弱口令PoCCVE-2026-20079: Cisco Secure Firewall Management Center - Authentication BypassCisco Catalyst SD-WAN身份验证绕过漏洞Cisco Catalyst SD-WAN 权限绕过漏洞(CVE-2026-20127)Cisco Asyncos 整数溢出漏洞 可导致远程代码执行PoCcisco-ucm-cluster-enum: Cisco Unified Communications Manager - Cluster EnumerationCisco Any Router and Switch 默认口令漏洞Cisco IOS 缓冲区溢出漏洞PoCCVE-2024-20404: Cisco Finesse - Server-Side Request Forgery (SSRF)Cisco IOS XE Software 命令注入漏洞