CVE Feed

    Dashboard / CVE / CVE-2023-20273

    CVE-2023-20273

    A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of root. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI. A successful exploit could allow the attacker to inject commands to the underlying operating system with root privileges.

    Published:Oct 24, 2023
    Last Modified:Oct 28, 2025
    EPS:Oct 24, 2023
    EPSS Score:0.91909
    CVSS Score:7.2

    CISA Notification

    Description

    A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of root. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI. A successful exploit could allow the attacker to inject commands to the underlying operating system with root privileges.

    Required Action:

    Verify that instances of Cisco IOS XE Web UI are in compliance with BOD 23-02 and apply mitigations per vendor instructions. For affected products (Cisco IOS XE Web UI exposed to the internet or to untrusted networks), follow vendor instructions to determine if a system may have been compromised and immediately report positive findings to CISA.

    Notes:

    No extra notes provided.

    Due Date
    Oct 27, 2023
    1050 days ago
    Alert Date
    Oct 23, 2023
    1054 days ago

    Affected Products

    Vendor
    Cisco
    Product
    Catalyst 3650
    Vendor
    Cisco
    Product
    Catalyst 3650-12x48fd-e
    Vendor
    Cisco
    Product
    Catalyst 3650-12x48fd-l
    Vendor
    Cisco
    Product
    Catalyst 3650-12x48fd-s
    Vendor
    Cisco
    Product
    Catalyst 3650-12x48uq
    Vendor
    Cisco
    Product
    Catalyst 3650-12x48uq-e
    Vendor
    Cisco
    Product
    Catalyst 3650-12x48uq-l
    Vendor
    Cisco
    Product
    Catalyst 3650-12x48uq-s
    Vendor
    Cisco
    Product
    Catalyst 3650-12x48ur
    Vendor
    Cisco
    Product
    Catalyst 3650-12x48ur-e
    Vendor
    Cisco
    Product
    Catalyst 3650-12x48ur-l
    Vendor
    Cisco
    Product
    Catalyst 3650-12x48ur-s
    Vendor
    Cisco
    Product
    Catalyst 3650-12x48uz
    Vendor
    Cisco
    Product
    Catalyst 3650-12x48uz-e
    Vendor
    Cisco
    Product
    Catalyst 3650-12x48uz-l
    Vendor
    Cisco
    Product
    Catalyst 3650-12x48uz-s
    Vendor
    Cisco
    Product
    Catalyst 3650-24pd
    Vendor
    Cisco
    Product
    Catalyst 3650-24pd-e
    Vendor
    Cisco
    Product
    Catalyst 3650-24pd-l
    Vendor
    Cisco
    Product
    Catalyst 3650-24pd-s
    Vendor
    Cisco
    Product
    Catalyst 3650-24pdm
    Vendor
    Cisco
    Product
    Catalyst 3650-24pdm-e
    Vendor
    Cisco
    Product
    Catalyst 3650-24pdm-l
    Vendor
    Cisco
    Product
    Catalyst 3650-24pdm-s
    Vendor
    Cisco
    Product
    Catalyst 3650-24ps-e
    Vendor
    Cisco
    Product
    Catalyst 3650-24ps-l
    Vendor
    Cisco
    Product
    Catalyst 3650-24ps-s
    Vendor
    Cisco
    Product
    Catalyst 3650-24td-e
    Vendor
    Cisco
    Product
    Catalyst 3650-24td-l
    Vendor
    Cisco
    Product
    Catalyst 3650-24td-s
    Vendor
    Cisco
    Product
    Catalyst 3650-24ts-e
    Vendor
    Cisco
    Product
    Catalyst 3650-24ts-l
    Vendor
    Cisco
    Product
    Catalyst 3650-24ts-s
    Vendor
    Cisco
    Product
    Catalyst 3650-48fd-e
    Vendor
    Cisco
    Product
    Catalyst 3650-48fd-l
    Vendor
    Cisco
    Product
    Catalyst 3650-48fd-s
    Vendor
    Cisco
    Product
    Catalyst 3650-48fq
    Vendor
    Cisco
    Product
    Catalyst 3650-48fq-e
    Vendor
    Cisco
    Product
    Catalyst 3650-48fq-l
    Vendor
    Cisco
    Product
    Catalyst 3650-48fq-s
    Vendor
    Cisco
    Product
    Catalyst 3650-48fqm
    Vendor
    Cisco
    Product
    Catalyst 3650-48fqm-e
    Vendor
    Cisco
    Product
    Catalyst 3650-48fqm-l
    Vendor
    Cisco
    Product
    Catalyst 3650-48fqm-s
    Vendor
    Cisco
    Product
    Catalyst 3650-48fs-e
    Vendor
    Cisco
    Product
    Catalyst 3650-48fs-l
    Vendor
    Cisco
    Product
    Catalyst 3650-48fs-s
    Vendor
    Cisco
    Product
    Catalyst 3650-48pd-e
    Vendor
    Cisco
    Product
    Catalyst 3650-48pd-l
    Vendor
    Cisco
    Product
    Catalyst 3650-48pd-s
    Vendor
    Cisco
    Product
    Catalyst 3650-48pq-e
    Vendor
    Cisco
    Product
    Catalyst 3650-48pq-l
    Vendor
    Cisco
    Product
    Catalyst 3650-48pq-s
    Vendor
    Cisco
    Product
    Catalyst 3650-48ps-e
    Vendor
    Cisco
    Product
    Catalyst 3650-48ps-l
    Vendor
    Cisco
    Product
    Catalyst 3650-48ps-s
    Vendor
    Cisco
    Product
    Catalyst 3650-48td-e
    Vendor
    Cisco
    Product
    Catalyst 3650-48td-l
    Vendor
    Cisco
    Product
    Catalyst 3650-48td-s
    Vendor
    Cisco
    Product
    Catalyst 3650-48tq-e
    Vendor
    Cisco
    Product
    Catalyst 3650-48tq-l
    Vendor
    Cisco
    Product
    Catalyst 3650-48tq-s
    Vendor
    Cisco
    Product
    Catalyst 3650-48ts-e
    Vendor
    Cisco
    Product
    Catalyst 3650-48ts-l
    Vendor
    Cisco
    Product
    Catalyst 3650-48ts-s
    Vendor
    Cisco
    Product
    Catalyst 3650-8x24pd-e
    Vendor
    Cisco
    Product
    Catalyst 3650-8x24pd-l
    Vendor
    Cisco
    Product
    Catalyst 3650-8x24pd-s
    Vendor
    Cisco
    Product
    Catalyst 3650-8x24uq
    Vendor
    Cisco
    Product
    Catalyst 3650-8x24uq-e
    Vendor
    Cisco
    Product
    Catalyst 3650-8x24uq-l
    Vendor
    Cisco
    Product
    Catalyst 3650-8x24uq-s
    Vendor
    Cisco
    Product
    Catalyst 3850
    Vendor
    Cisco
    Product
    Catalyst 3850-12s-e
    Vendor
    Cisco
    Product
    Catalyst 3850-12s-s
    Vendor
    Cisco
    Product
    Catalyst 3850-12x48u
    Vendor
    Cisco
    Product
    Catalyst 3850-12xs-e
    Vendor
    Cisco
    Product
    Catalyst 3850-12xs-s
    Vendor
    Cisco
    Product
    Catalyst 3850-16xs-e
    Vendor
    Cisco
    Product
    Catalyst 3850-16xs-s
    Vendor
    Cisco
    Product
    Catalyst 3850-24p-e
    Vendor
    Cisco
    Product
    Catalyst 3850-24p-l
    Vendor
    Cisco
    Product
    Catalyst 3850-24p-s
    Vendor
    Cisco
    Product
    Catalyst 3850-24pw-s
    Vendor
    Cisco
    Product
    Catalyst 3850-24s-e
    Vendor
    Cisco
    Product
    Catalyst 3850-24s-s
    Vendor
    Cisco
    Product
    Catalyst 3850-24t-e
    Vendor
    Cisco
    Product
    Catalyst 3850-24t-l
    Vendor
    Cisco
    Product
    Catalyst 3850-24t-s
    Vendor
    Cisco
    Product
    Catalyst 3850-24u
    Vendor
    Cisco
    Product
    Catalyst 3850-24u-e
    Vendor
    Cisco
    Product
    Catalyst 3850-24u-l
    Vendor
    Cisco
    Product
    Catalyst 3850-24u-s
    Vendor
    Cisco
    Product
    Catalyst 3850-24xs
    Vendor
    Cisco
    Product
    Catalyst 3850-24xs-e
    Vendor
    Cisco
    Product
    Catalyst 3850-24xs-s
    Vendor
    Cisco
    Product
    Catalyst 3850-24xu
    Vendor
    Cisco
    Product
    Catalyst 3850-24xu-e
    Vendor
    Cisco
    Product
    Catalyst 3850-24xu-l
    Vendor
    Cisco
    Product
    Catalyst 3850-24xu-s
    Vendor
    Cisco
    Product
    Catalyst 3850-32xs-e
    Vendor
    Cisco
    Product
    Catalyst 3850-32xs-s
    Vendor
    Cisco
    Product
    Catalyst 3850-48f-e
    Vendor
    Cisco
    Product
    Catalyst 3850-48f-l
    Vendor
    Cisco
    Product
    Catalyst 3850-48f-s
    Vendor
    Cisco
    Product
    Catalyst 3850-48p-e
    Vendor
    Cisco
    Product
    Catalyst 3850-48p-l
    Vendor
    Cisco
    Product
    Catalyst 3850-48p-s
    Vendor
    Cisco
    Product
    Catalyst 3850-48pw-s
    Vendor
    Cisco
    Product
    Catalyst 3850-48t-e
    Vendor
    Cisco
    Product
    Catalyst 3850-48t-l
    Vendor
    Cisco
    Product
    Catalyst 3850-48t-s
    Vendor
    Cisco
    Product
    Catalyst 3850-48u
    Vendor
    Cisco
    Product
    Catalyst 3850-48u-e
    Vendor
    Cisco
    Product
    Catalyst 3850-48u-l
    Vendor
    Cisco
    Product
    Catalyst 3850-48u-s
    Vendor
    Cisco
    Product
    Catalyst 3850-48xs
    Vendor
    Cisco
    Product
    Catalyst 3850-48xs-e
    Vendor
    Cisco
    Product
    Catalyst 3850-48xs-f-e
    Vendor
    Cisco
    Product
    Catalyst 3850-48xs-f-s
    Vendor
    Cisco
    Product
    Catalyst 3850-48xs-s
    Vendor
    Cisco
    Product
    Catalyst 3850-nm-2-40g
    Vendor
    Cisco
    Product
    Catalyst 3850-nm-8-10g
    Vendor
    Cisco
    Product
    Ios Xe

    Exploits

    https://github.com/smokeintheshell/CVE-2023-20273

    Related CVEs

    CVE-2023-20081 (CVSS 6.8) — A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, C…
    CVE-2022-20864 (CVSS 4.6) — A vulnerability in the password-recovery disable feature of Cisco IOS XE ROM Monitor (ROMMON) Software for Cis…
    CVE-2022-20870 (CVSS 8.6) — A vulnerability in the egress MPLS packet processing function of Cisco IOS XE Software for Cisco Catalyst 3650…
    CVE-2022-20851 (CVSS 5.5) — A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker t…
    CVE-2022-20848 (CVSS 8.6) — A vulnerability in the UDP processing functionality of Cisco IOS XE Software for Embedded Wireless Controllers…
    CVE-2022-20677 (CVSS 5.5) — Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could al…
    CVE-2020-3422 (CVSS 7.5) — A vulnerability in the IP Service Level Agreement (SLA) responder feature of Cisco IOS XE Software could allow…
    CVE-2018-0179 (CVSS 5.9) — Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an …
    CVE-2018-0180 (CVSS 5.9) — Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an …
    CVE-2017-12231 (CVSS 7.5) — A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 thr…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High