CVE-2023-20198: Cisco IOS XE Web UI Privilege Escalation Vulnerability
Cisco IOS XE Web UI contains a privilege escalation vulnerability in the web user interface that could allow a remote, unauthenticated attacker to create an account with privilege level 15 access. The attacker can then use that account to gain control of the affected device.
Read the original at CISA KEV Catalog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2023-20198Cisco
- Related
- CVE-2026-20320: Cisco Broad Works Improper Restriction of XML External Entity Reference Vulnerability Known Exploited Vulnerabilities · Nov 10, 2026CVE-2026-76418: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Known Exploited Vulnerabilities · Oct 29, 2026CVE-2026-76519: Cisco Secure Email Gateway Relative Path Traversal Vulnerability Known Exploited Vulnerabilities · Oct 14, 2026