The vulnerability resides in the Web User Interface of Cisco IOS XE software that is accessible via the public internet. This means that any Cisco endpoint running the affected software, with HTTP and HTTPS Server features enabled and connected to the internet, is susceptible to complete device takeover. Reports from Ars Technica indicate that approximately 80,000 endpoints are currently impacted by this flaw, now identified as CVE-2023-20198, and it carries a severity rating of 10.
Cisco Networks Vulnerable: Critical Flaw Exploited, Urgent Patch Required
Security Alert: Cisco Urges Immediate Action
