Cisco Critical Vulnerability Exploited by Threat Actors

A zero-day vulnerability in Cisco IOS XE software (CVE-2023-20198) has been exploited in the wild, and more than 10,000 devices have been compromised. The vulnerability allows threat actors to gain full administrator privileges and take complete control over affected devices remotely. Threat actors exploit the vulnerability by sending a specially crafted HTTP request to the Web UI of an affected Cisco IOS XE device. If successful, the threat actor can create a new user account with administrator privileges and gain full control over the device.