VulnRadar

Data against noise.

Built with NaN
Page generated: 09 Nov 2026, 10:53 UTC
← Dashboard

CVE-2023-20273

A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of root. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted…

Read full description
A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of root. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI. A successful exploit could allow the attacker to inject commands to the underlying operating system with root privileges.
CVSS 7.2 (HIGH) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE
0.0/10
REALITY · THREAT PRIORITY
8.5/10
General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?
  • Recorded exploitation baseline: +7.00
  • Technical severity: CVSS 7.2: +1.08
  • Fresh EPSS: 92.94%: +0.46

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 14 documents and public datasets.

Hype components

Headline sample (25%)
0/100
Press, 30 days (60%)
0/100
Grounded branding (15%)
0/100
HYPE TOTAL0/100

Sources and documents

The Hacker News
Press · 24 Jun 2025, 07:00 · China-linked Salt Typhoon Exploits Critical Cisco Vulnerability to Target Canadian Telecom - The Hacker News
Cybersecurity Dive
Press · 25 Feb 2025, 08:00 · Attackers exploiting Cisco vulnerabilities tied to Salt Typhoon campaign - Cybersecurity Dive
GreyNoise
Press · 24 Feb 2025, 08:00 · GreyNoise Observes Active Exploitation of Cisco Vulnerabilities Tied to Salt Typhoon Attacks - GreyNoise
The Hacker News
Press · 21 Feb 2025, 08:00 · Cisco Confirms Salt Typhoon Exploited CVE-2018-0171 to Target U.S. Telecom Networks - The Hacker News
Cyber Security Agency of Singapore
Press · 19 Feb 2025, 08:00 · Active Exploitation of Cisco Internetworking Operating System eXtended Edition - Cyber Security Agency of Singapore
See all 14 source documents
Recorded Future
Press · 13 Feb 2025, 08:00 · RedMike Cyber Attack on Cisco Devices in Telecommunications - Recorded Future
CyberSecurityNews
Press · 13 Nov 2024, 08:00 · CISA, NSA, & FBI Release List of 15 Most Exploited Vulnerabilities in 2023 - CyberSecurityNews
National Cyber Security Centre
Press · 23 Oct 2023, 07:00 · Exploitation of Cisco IOS XE vulnerabilities affecting UK organisations - National Cyber Security Centre
BleepingComputer
Press · 23 Oct 2023, 07:00 · Cisco patches IOS XE zero-days used to hack over 50,000 devices - BleepingComputer
BleepingComputer
Press · 20 Oct 2023, 07:00 · Cisco discloses new IOS XE zero-day exploited to deploy malware implant - BleepingComputer
CCB Belgium
Press · 18 Oct 2023, 07:00 · WARNING: CRITICAL VULNERABILITY IN CISCO IOS XE, RISK OF REMOTE UNAUTHENTICATED PRIVILEGE ESCALATION AND SYSTEM TAKEOVER ON SYSTEMS RUNNING WEB UI AND HTTP/HTTPS SERVICES - CCB Belgium
Hong Kong Computer Emergency Response Team Coordination Centre
Press · 17 Oct 2023, 07:00 · Cisco IOS XE Escalation of Privilege Vulnerability - Hong Kong Computer Emergency Response Team Coordination Centre
Rapid7
Press · 17 Oct 2023, 07:00 · CVE-2023-20198: Active Exploitation of Cisco IOS XE Zero-Day Vulnerability - Rapid7
Cisco Talos Blog
Press · 16 Oct 2023, 07:00 · Active exploitation of Cisco IOS XE Software Web Management User Interface vulnerabilities - Cisco Talos Blog

Score evolution

● Hype   ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.0 · reality 8.5 (2026-11-02 15:13). The curve appears once the score changes.

Public exploit evidence

1

Public exploit entries / repo candidates

See 1 repos with metrics
RepositoryStarsForksLanguageUpdated
smokeintheshell/CVE-2023-20273155Python01 Apr 2024, 18:59
Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence
Exploitation recorded
Priority basis
Recorded exploitation; CVSS 7.2; EPSS 92.9%
Attention, last 30 days
0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential
network access, high privileges, no user interaction.
Observed activity
Exploitation recorded in CISA KEV.
Known scale
Not quantified.
Evidence confidence basis
Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:58:48.602448+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline
First press mention
16 Oct 2023, 07:00
Added to the CISA KEV catalog
23 Oct 2023, 00:00
Published
24 Oct 2023, 14:13
Latest press mention
24 Jun 2025, 07:00
Score calculated
05 Nov 2026, 13:58
PoCs on GitHub
1 repositories
Source: CVE List V5 · CISA KEV · FIRST EPSS · GitHub · RSSVulnRadar