{"history":[{"alert":0,"cve":"CVE-2023-20273","id":22458,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.92938, \"percentile\": 0.99834}"},{"alert":0,"cve":"CVE-2023-20273","id":20077,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.92938, \"percentile\": 0.99833}"},{"alert":0,"cve":"CVE-2023-20273","id":18043,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.92938, \"percentile\": 0.99833}"},{"alert":0,"cve":"CVE-2023-20273","id":16107,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.92938, \"percentile\": 0.99833}"},{"alert":0,"cve":"CVE-2023-20273","id":14085,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.92938, \"percentile\": 0.99832}"},{"alert":0,"cve":"CVE-2023-20273","id":11867,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.92938, \"percentile\": 0.99832}"},{"alert":0,"cve":"CVE-2023-20273","id":9853,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.92938, \"percentile\": 0.99832}"},{"alert":1,"cve":"CVE-2023-20273","id":8214,"kind":"cna","observed_at":1793830801,"payload":"{\"containers\": {\"adp\": [{\"providerMetadata\": {\"dateUpdated\": \"2024-08-02T09:05:36.250Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"name\": \"cisco-sa-iosxe-webui-privesc-j22SaA4z\", \"tags\": [\"x_transferred\"], \"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z\"}], \"title\": \"CVE Program Container\"}, {\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2023-20273\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2023-11-15T16:39:19.546517Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2023-10-23\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-20273\"}, \"type\": \"kev\"}}], \"providerMetadata\": {\"dateUpdated\": \"2025-10-21T23:05:33.896Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-20273\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2023-10-23T00:00:00.000Z\", \"value\": \"CVE-2023-20273 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"product\": \"Cisco IOS XE Software\", \"vendor\": \"Cisco\", \"versions\": [{\"status\": \"affected\", \"version\": \"16.1.1\"}, {\"status\": \"affected\", \"version\": \"16.1.2\"}, {\"status\": \"affected\", \"version\": \"16.1.3\"}, {\"status\": \"affected\", \"version\": \"16.2.1\"}, {\"status\": \"affected\", \"version\": \"16.2.2\"}, {\"status\": \"affected\", \"version\": \"16.3.1\"}, {\"status\": \"affected\", \"version\": \"16.3.2\"}, {\"status\": \"affected\", \"version\": \"16.3.3\"}, {\"status\": \"affected\", \"version\": \"16.3.1a\"}, {\"status\": \"affected\", \"version\": \"16.3.4\"}, {\"status\": \"affected\", \"version\": \"16.3.5\"}, {\"status\": \"affected\", \"version\": \"16.3.5b\"}, {\"status\": \"affected\", \"version\": \"16.3.6\"}, {\"status\": \"affected\", \"version\": \"16.3.7\"}, {\"status\": \"affected\", \"version\": \"16.3.8\"}, {\"status\": \"affected\", \"version\": \"16.3.9\"}, {\"status\": \"affected\", \"version\": \"16.3.10\"}, {\"status\": \"affected\", \"version\": \"16.3.11\"}, {\"status\": \"affected\", \"version\": \"16.4.1\"}, {\"status\": \"affected\", \"version\": \"16.4.2\"}, {\"status\": \"affected\", \"version\": \"16.4.3\"}, {\"status\": \"affected\", \"version\": \"16.5.1\"}, {\"status\": \"affected\", \"version\": \"16.5.1a\"}, {\"status\": \"affected\", \"version\": \"16.5.1b\"}, {\"status\": \"affected\", \"version\": \"16.5.2\"}, {\"status\": \"affected\", \"version\": \"16.5.3\"}, {\"status\": \"affected\", \"version\": \"16.6.1\"}, {\"status\": \"affected\", \"version\": \"16.6.2\"}, {\"status\": \"affected\", \"version\": \"16.6.3\"}, {\"status\": \"affected\", \"version\": \"16.6.4\"}, {\"status\": \"affected\", \"version\": \"16.6.5\"}, {\"status\": \"affected\", \"version\": \"16.6.4a\"}, {\"status\": \"affected\", \"version\": \"16.6.5a\"}, {\"status\": \"affected\", \"version\": \"16.6.6\"}, {\"status\": \"affected\", \"version\": \"16.6.7\"}, {\"status\": \"affected\", \"version\": \"16.6.8\"}, {\"status\": \"affected\", \"version\": \"16.6.9\"}, {\"status\": \"affected\", \"version\": \"16.6.10\"}, {\"status\": \"affected\", \"version\": \"16.7.1\"}, {\"status\": \"affected\", \"version\": \"16.7.1a\"}, {\"status\": \"affected\", \"version\": \"16.7.1b\"}, {\"status\": \"affected\", \"version\": \"16.7.2\"}, {\"status\": \"affected\", \"version\": \"16.7.3\"}, {\"status\": \"affected\", \"version\": \"16.7.4\"}, {\"status\": \"affected\", \"version\": \"16.8.1\"}, {\"status\": \"affected\", \"version\": \"16.8.1a\"}, {\"status\": \"affected\", \"version\": \"16.8.1b\"}, {\"status\": \"affected\", \"version\": \"16.8.1s\"}, {\"status\": \"affected\", \"version\": \"16.8.1c\"}, {\"status\": \"affected\", \"version\": \"16.8.1d\"}, {\"status\": \"affected\", \"version\": \"16.8.2\"}, {\"status\": \"affected\", \"version\": \"16.8.1e\"}, {\"status\": \"affected\", \"version\": \"16.8.3\"}, {\"status\": \"affected\", \"version\": \"16.9.1\"}, {\"status\": \"affected\", \"version\": \"16.9.2\"}, {\"status\": \"affected\", \"version\": \"16.9.1a\"}, {\"status\": \"affected\", \"version\": \"16.9.1b\"}, {\"status\": \"affected\", \"version\": \"16.9.1s\"}, {\"status\": \"affected\", \"version\": \"16.9.3\"}, {\"status\": \"affected\", \"version\": \"16.9.4\"}, {\"status\": \"affected\", \"version\": \"16.9.3a\"}, {\"status\": \"affected\", \"version\": \"16.9.5\"}, {\"status\": \"affected\", \"version\": \"16.9.5f\"}, {\"status\": \"affected\", \"version\": \"16.9.6\"}, {\"status\": \"affected\", \"version\": \"16.9.7\"}, {\"status\": \"affected\", \"version\": \"16.9.8\"}, {\"status\": \"affected\", \"version\": \"16.10.1\"}, {\"status\": \"affected\", \"version\": \"16.10.1a\"}, {\"status\": \"affected\", \"version\": \"16.10.1b\"}, {\"status\": \"affected\", \"version\": \"16.10.1s\"}, {\"status\": \"affected\", \"version\": \"16.10.1c\"}, {\"status\": \"affected\", \"version\": \"16.10.1e\"}, {\"status\": \"affected\", \"version\": \"16.10.1d\"}, {\"status\": \"affected\", \"version\": \"16.10.2\"}, {\"status\": \"affected\", \"version\": \"16.10.1f\"}, {\"status\": \"affected\", \"version\": \"16.10.1g\"}, {\"status\": \"affected\", \"version\": \"16.10.3\"}, {\"status\": \"affected\", \"version\": \"16.11.1\"}, {\"status\": \"affected\", \"version\": \"16.11.1a\"}, {\"status\": \"affected\", \"version\": \"16.11.1b\"}, {\"status\": \"affected\", \"version\": \"16.11.2\"}, {\"status\": \"affected\", \"version\": \"16.11.1s\"}, {\"status\": \"affected\", \"version\": \"16.12.1\"}, {\"status\": \"affected\", \"version\": \"16.12.1s\"}, {\"status\": \"affected\", \"version\": \"16.12.1a\"}, {\"status\": \"affected\", \"version\": \"16.12.1c\"}, {\"status\": \"affected\", \"version\": \"16.12.1w\"}, {\"status\": \"affected\", \"version\": \"16.12.2\"}, {\"status\": \"affected\", \"version\": \"16.12.1y\"}, {\"status\": \"affected\", \"version\": \"16.12.2a\"}, {\"status\": \"affected\", \"version\": \"16.12.3\"}, {\"status\": \"affected\", \"version\": \"16.12.8\"}, {\"status\": \"affected\", \"version\": \"16.12.2s\"}, {\"status\": \"affected\", \"version\": \"16.12.1x\"}, {\"status\": \"affected\", \"version\": \"16.12.1t\"}, {\"status\": \"affected\", \"version\": \"16.12.4\"}, {\"status\": \"affected\", \"version\": \"16.12.3s\"}, {\"status\": \"affected\", \"version\": \"16.12.3a\"}, {\"status\": \"affected\", \"version\": \"16.12.4a\"}, {\"status\": \"affected\", \"version\": \"16.12.5\"}, {\"status\": \"affected\", \"version\": \"16.12.6\"}, {\"status\": \"affected\", \"version\": \"16.12.1z1\"}, {\"status\": \"affected\", \"version\": \"16.12.5a\"}, {\"status\": \"affected\", \"version\": \"16.12.5b\"}, {\"status\": \"affected\", \"version\": \"16.12.1z2\"}, {\"status\": \"affected\", \"version\": \"16.12.6a\"}, {\"status\": \"affected\", \"version\": \"16.12.7\"}, {\"status\": \"affected\", \"version\": \"16.12.9\"}, {\"status\": \"affected\", \"version\": \"16.12.10\"}, {\"status\": \"affected\", \"version\": \"17.1.1\"}, {\"status\": \"affected\", \"version\": \"17.1.1a\"}, {\"status\": \"affected\", \"version\": \"17.1.1s\"}, {\"status\": \"affected\", \"version\": \"17.1.1t\"}, {\"status\": \"affected\", \"version\": \"17.1.3\"}, {\"status\": \"affected\", \"version\": \"17.2.1\"}, {\"status\": \"affected\", \"version\": \"17.2.1r\"}, {\"status\": \"affected\", \"version\": \"17.2.1a\"}, {\"status\": \"affected\", \"version\": \"17.2.1v\"}, {\"status\": \"affected\", \"version\": \"17.2.2\"}, {\"status\": \"affected\", \"version\": \"17.2.3\"}, {\"status\": \"affected\", \"version\": \"17.3.1\"}, {\"status\": \"affected\", \"version\": \"17.3.2\"}, {\"status\": \"affected\", \"version\": \"17.3.3\"}, {\"status\": \"affected\", \"version\": \"17.3.1a\"}, {\"status\": \"affected\", \"version\": \"17.3.1w\"}, {\"status\": \"affected\", \"version\": \"17.3.2a\"}, {\"status\": \"affected\", \"version\": \"17.3.1x\"}, {\"status\": \"affected\", \"version\": \"17.3.1z\"}, {\"status\": \"affected\", \"version\": \"17.3.4\"}, {\"status\": \"affected\", \"version\": \"17.3.5\"}, {\"status\": \"affected\", \"version\": \"17.3.4a\"}, {\"status\": \"affected\", \"version\": \"17.3.6\"}, {\"status\": \"affected\", \"version\": \"17.3.4b\"}, {\"status\": \"affected\", \"version\": \"17.3.4c\"}, {\"status\": \"affected\", \"version\": \"17.3.5a\"}, {\"status\": \"affected\", \"version\": \"17.3.5b\"}, {\"status\": \"affected\", \"version\": \"17.3.7\"}, {\"status\": \"affected\", \"version\": \"17.3.8\"}, {\"status\": \"affected\", \"version\": \"17.4.1\"}, {\"status\": \"affected\", \"version\": \"17.4.2\"}, {\"status\": \"affected\", \"version\": \"17.4.1a\"}, {\"status\": \"affected\", \"version\": \"17.4.1b\"}, {\"status\": \"affected\", \"version\": \"17.4.2a\"}, {\"status\": \"affected\", \"version\": \"17.5.1\"}, {\"status\": \"affected\", \"version\": \"17.5.1a\"}, {\"status\": \"affected\", \"version\": \"17.5.1b\"}, {\"status\": \"affected\", \"version\": \"17.5.1c\"}, {\"status\": \"affected\", \"version\": \"17.6.1\"}, {\"status\": \"affected\", \"version\": \"17.6.2\"}, {\"status\": \"affected\", \"version\": \"17.6.1w\"}, {\"status\": \"affected\", \"version\": \"17.6.1a\"}, {\"status\": \"affected\", \"version\": \"17.6.1x\"}, {\"status\": \"affected\", \"version\": \"17.6.3\"}, {\"status\": \"affected\", \"version\": \"17.6.1y\"}, {\"status\": \"affected\", \"version\": \"17.6.1z\"}, {\"status\": \"affected\", \"version\": \"17.6.3a\"}, {\"status\": \"affected\", \"version\": \"17.6.4\"}, {\"status\": \"affected\", \"version\": \"17.6.1z1\"}, {\"status\": \"affected\", \"version\": \"17.6.5\"}, {\"status\": \"affected\", \"version\": \"17.6.6\"}, {\"status\": \"affected\", \"version\": \"17.7.1\"}, {\"status\": \"affected\", \"version\": \"17.7.1a\"}, {\"status\": \"affected\", \"version\": \"17.7.1b\"}, {\"status\": \"affected\", \"version\": \"17.7.2\"}, {\"status\": \"affected\", \"version\": \"17.10.1\"}, {\"status\": \"affected\", \"version\": \"17.10.1a\"}, {\"status\": \"affected\", \"version\": \"17.10.1b\"}, {\"status\": \"affected\", \"version\": \"17.8.1\"}, {\"status\": \"affected\", \"version\": \"17.8.1a\"}, {\"status\": \"affected\", \"version\": \"17.9.1\"}, {\"status\": \"affected\", \"version\": \"17.9.1w\"}, {\"status\": \"affected\", \"version\": \"17.9.2\"}, {\"status\": \"affected\", \"version\": \"17.9.1a\"}, {\"status\": \"affected\", \"version\": \"17.9.1x\"}, {\"status\": \"affected\", \"version\": \"17.9.1y\"}, {\"status\": \"affected\", \"version\": \"17.9.3\"}, {\"status\": \"affected\", \"version\": \"17.9.2a\"}, {\"status\": \"affected\", \"version\": \"17.9.1x1\"}, {\"status\": \"affected\", \"version\": \"17.9.3a\"}, {\"status\": \"affected\", \"version\": \"17.9.4\"}, {\"status\": \"affected\", \"version\": \"17.9.1y1\"}, {\"status\": \"affected\", \"version\": \"17.11.1\"}, {\"status\": \"affected\", \"version\": \"17.11.1a\"}, {\"status\": \"affected\", \"version\": \"17.12.1\"}, {\"status\": \"affected\", \"version\": \"17.12.1a\"}, {\"status\": \"affected\", \"version\": \"17.11.99SW\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of root. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI. A successful exploit could allow the attacker to inject commands to the underlying operating system with root privileges.\"}], \"exploits\": [{\"lang\": \"en\", \"value\": \"Cisco is aware of active exploitation of these vulnerabilities.\"}], \"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 7.2, \"baseSeverity\": \"HIGH\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"HIGH\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\", \"version\": \"3.1\"}, \"format\": \"cvssV3_1\"}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-78\", \"description\": \"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\", \"lang\": \"en\", \"type\": \"cwe\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2024-01-25T16:58:37.816Z\", \"orgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"shortName\": \"cisco\"}, \"references\": [{\"name\": \"cisco-sa-iosxe-webui-privesc-j22SaA4z\", \"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z\"}], \"source\": {\"advisory\": \"cisco-sa-iosxe-webui-privesc-j22SaA4z\", \"defects\": [\"CSCwh87343\"], \"discovery\": \"EXTERNAL\"}}}, \"cveMetadata\": {\"assignerOrgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"assignerShortName\": \"cisco\", \"cveId\": \"CVE-2023-20273\", \"datePublished\": \"2023-10-24T14:13:36.311Z\", \"dateReserved\": \"2022-10-27T18:47:50.373Z\", \"dateUpdated\": \"2025-10-21T23:05:33.896Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.1\"}"},{"alert":0,"cve":"CVE-2023-20273","id":7401,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.92938, \"percentile\": 0.99832}"},{"alert":0,"cve":"CVE-2023-20273","id":5178,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.92938, \"percentile\": 0.99832}"},{"alert":0,"cve":"CVE-2023-20273","id":2960,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.92938, \"percentile\": 0.99831}"},{"alert":1,"cve":"CVE-2023-20273","id":746,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2023-20273\", \"cwes\": [\"CWE-78\"], \"dateAdded\": \"2023-10-23\", \"dueDate\": \"2023-10-27\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z;  https://nvd.nist.gov/vuln/detail/CVE-2023-20273\", \"product\": \"Cisco IOS XE Web UI\", \"requiredAction\": \"Verify that instances of Cisco IOS XE Web UI are in compliance with BOD 23-02 and apply mitigations per vendor instructions. For affected products (Cisco IOS XE Web UI exposed to the internet or to untrusted networks), follow vendor instructions to determine if a system may have been compromised and immediately report positive findings to CISA.\", \"shortDescription\": \"Cisco IOS XE contains a command injection vulnerability in the web user interface. When chained with CVE-2023-20198, the attacker can leverage the new local user to elevate privilege to root and write the implant to the file system. Cisco identified CVE-2023-20273 as the vulnerability exploited to deploy the implant. CVE-2021-1435, previously associated with the exploitation events, is no longer believed to be related to this activity.\", \"vendorProject\": \"Cisco\", \"vulnerabilityName\": \"Cisco IOS XE Web UI Command Injection Vulnerability\"}"}],"record":{"affected":[{"product":"Cisco IOS XE Software","vendor":"Cisco","versions":[{"status":"affected","version":"16.1.1"},{"status":"affected","version":"16.1.2"},{"status":"affected","version":"16.1.3"},{"status":"affected","version":"16.2.1"},{"status":"affected","version":"16.2.2"},{"status":"affected","version":"16.3.1"},{"status":"affected","version":"16.3.2"},{"status":"affected","version":"16.3.3"},{"status":"affected","version":"16.3.1a"},{"status":"affected","version":"16.3.4"},{"status":"affected","version":"16.3.5"},{"status":"affected","version":"16.3.5b"},{"status":"affected","version":"16.3.6"},{"status":"affected","version":"16.3.7"},{"status":"affected","version":"16.3.8"},{"status":"affected","version":"16.3.9"},{"status":"affected","version":"16.3.10"},{"status":"affected","version":"16.3.11"},{"status":"affected","version":"16.4.1"},{"status":"affected","version":"16.4.2"},{"status":"affected","version":"16.4.3"},{"status":"affected","version":"16.5.1"},{"status":"affected","version":"16.5.1a"},{"status":"affected","version":"16.5.1b"},{"status":"affected","version":"16.5.2"},{"status":"affected","version":"16.5.3"},{"status":"affected","version":"16.6.1"},{"status":"affected","version":"16.6.2"},{"status":"affected","version":"16.6.3"},{"status":"affected","version":"16.6.4"},{"status":"affected","version":"16.6.5"},{"status":"affected","version":"16.6.4a"},{"status":"affected","version":"16.6.5a"},{"status":"affected","version":"16.6.6"},{"status":"affected","version":"16.6.7"},{"status":"affected","version":"16.6.8"},{"status":"affected","version":"16.6.9"},{"status":"affected","version":"16.6.10"},{"status":"affected","version":"16.7.1"},{"status":"affected","version":"16.7.1a"},{"status":"affected","version":"16.7.1b"},{"status":"affected","version":"16.7.2"},{"status":"affected","version":"16.7.3"},{"status":"affected","version":"16.7.4"},{"status":"affected","version":"16.8.1"},{"status":"affected","version":"16.8.1a"},{"status":"affected","version":"16.8.1b"},{"status":"affected","version":"16.8.1s"},{"status":"affected","version":"16.8.1c"},{"status":"affected","version":"16.8.1d"},{"status":"affected","version":"16.8.2"},{"status":"affected","version":"16.8.1e"},{"status":"affected","version":"16.8.3"},{"status":"affected","version":"16.9.1"},{"status":"affected","version":"16.9.2"},{"status":"affected","version":"16.9.1a"},{"status":"affected","version":"16.9.1b"},{"status":"affected","version":"16.9.1s"},{"status":"affected","version":"16.9.3"},{"status":"affected","version":"16.9.4"},{"status":"affected","version":"16.9.3a"},{"status":"affected","version":"16.9.5"},{"status":"affected","version":"16.9.5f"},{"status":"affected","version":"16.9.6"},{"status":"affected","version":"16.9.7"},{"status":"affected","version":"16.9.8"},{"status":"affected","version":"16.10.1"},{"status":"affected","version":"16.10.1a"},{"status":"affected","version":"16.10.1b"},{"status":"affected","version":"16.10.1s"},{"status":"affected","version":"16.10.1c"},{"status":"affected","version":"16.10.1e"},{"status":"affected","version":"16.10.1d"},{"status":"affected","version":"16.10.2"},{"status":"affected","version":"16.10.1f"},{"status":"affected","version":"16.10.1g"},{"status":"affected","version":"16.10.3"},{"status":"affected","version":"16.11.1"},{"status":"affected","version":"16.11.1a"},{"status":"affected","version":"16.11.1b"},{"status":"affected","version":"16.11.2"},{"status":"affected","version":"16.11.1s"},{"status":"affected","version":"16.12.1"},{"status":"affected","version":"16.12.1s"},{"status":"affected","version":"16.12.1a"},{"status":"affected","version":"16.12.1c"},{"status":"affected","version":"16.12.1w"},{"status":"affected","version":"16.12.2"},{"status":"affected","version":"16.12.1y"},{"status":"affected","version":"16.12.2a"},{"status":"affected","version":"16.12.3"},{"status":"affected","version":"16.12.8"},{"status":"affected","version":"16.12.2s"},{"status":"affected","version":"16.12.1x"},{"status":"affected","version":"16.12.1t"},{"status":"affected","version":"16.12.4"},{"status":"affected","version":"16.12.3s"},{"status":"affected","version":"16.12.3a"},{"status":"affected","version":"16.12.4a"},{"status":"affected","version":"16.12.5"},{"status":"affected","version":"16.12.6"},{"status":"affected","version":"16.12.1z1"},{"status":"affected","version":"16.12.5a"},{"status":"affected","version":"16.12.5b"},{"status":"affected","version":"16.12.1z2"},{"status":"affected","version":"16.12.6a"},{"status":"affected","version":"16.12.7"},{"status":"affected","version":"16.12.9"},{"status":"affected","version":"16.12.10"},{"status":"affected","version":"17.1.1"},{"status":"affected","version":"17.1.1a"},{"status":"affected","version":"17.1.1s"},{"status":"affected","version":"17.1.1t"},{"status":"affected","version":"17.1.3"},{"status":"affected","version":"17.2.1"},{"status":"affected","version":"17.2.1r"},{"status":"affected","version":"17.2.1a"},{"status":"affected","version":"17.2.1v"},{"status":"affected","version":"17.2.2"},{"status":"affected","version":"17.2.3"},{"status":"affected","version":"17.3.1"},{"status":"affected","version":"17.3.2"},{"status":"affected","version":"17.3.3"},{"status":"affected","version":"17.3.1a"},{"status":"affected","version":"17.3.1w"},{"status":"affected","version":"17.3.2a"},{"status":"affected","version":"17.3.1x"},{"status":"affected","version":"17.3.1z"},{"status":"affected","version":"17.3.4"},{"status":"affected","version":"17.3.5"},{"status":"affected","version":"17.3.4a"},{"status":"affected","version":"17.3.6"},{"status":"affected","version":"17.3.4b"},{"status":"affected","version":"17.3.4c"},{"status":"affected","version":"17.3.5a"},{"status":"affected","version":"17.3.5b"},{"status":"affected","version":"17.3.7"},{"status":"affected","version":"17.3.8"},{"status":"affected","version":"17.4.1"},{"status":"affected","version":"17.4.2"},{"status":"affected","version":"17.4.1a"},{"status":"affected","version":"17.4.1b"},{"status":"affected","version":"17.4.2a"},{"status":"affected","version":"17.5.1"},{"status":"affected","version":"17.5.1a"},{"status":"affected","version":"17.5.1b"},{"status":"affected","version":"17.5.1c"},{"status":"affected","version":"17.6.1"},{"status":"affected","version":"17.6.2"},{"status":"affected","version":"17.6.1w"},{"status":"affected","version":"17.6.1a"},{"status":"affected","version":"17.6.1x"},{"status":"affected","version":"17.6.3"},{"status":"affected","version":"17.6.1y"},{"status":"affected","version":"17.6.1z"},{"status":"affected","version":"17.6.3a"},{"status":"affected","version":"17.6.4"},{"status":"affected","version":"17.6.1z1"},{"status":"affected","version":"17.6.5"},{"status":"affected","version":"17.6.6"},{"status":"affected","version":"17.7.1"},{"status":"affected","version":"17.7.1a"},{"status":"affected","version":"17.7.1b"},{"status":"affected","version":"17.7.2"},{"status":"affected","version":"17.10.1"},{"status":"affected","version":"17.10.1a"},{"status":"affected","version":"17.10.1b"},{"status":"affected","version":"17.8.1"},{"status":"affected","version":"17.8.1a"},{"status":"affected","version":"17.9.1"},{"status":"affected","version":"17.9.1w"},{"status":"affected","version":"17.9.2"},{"status":"affected","version":"17.9.1a"},{"status":"affected","version":"17.9.1x"},{"status":"affected","version":"17.9.1y"},{"status":"affected","version":"17.9.3"},{"status":"affected","version":"17.9.2a"},{"status":"affected","version":"17.9.1x1"},{"status":"affected","version":"17.9.3a"},{"status":"affected","version":"17.9.4"},{"status":"affected","version":"17.9.1y1"},{"status":"affected","version":"17.11.1"},{"status":"affected","version":"17.11.1a"},{"status":"affected","version":"17.12.1"},{"status":"affected","version":"17.12.1a"},{"status":"affected","version":"17.11.99SW"}]}],"cna":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-02T09:05:36.250Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"cisco-sa-iosxe-webui-privesc-j22SaA4z","tags":["x_transferred"],"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z"}],"title":"CVE Program Container"},{"metrics":[{"other":{"content":{"id":"CVE-2023-20273","options":[{"Exploitation":"active"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2023-11-15T16:39:19.546517Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2023-10-23","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-20273"},"type":"kev"}}],"providerMetadata":{"dateUpdated":"2025-10-21T23:05:33.896Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-20273"}],"timeline":[{"lang":"en","time":"2023-10-23T00:00:00.000Z","value":"CVE-2023-20273 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"Cisco IOS XE Software","vendor":"Cisco","versions":[{"status":"affected","version":"16.1.1"},{"status":"affected","version":"16.1.2"},{"status":"affected","version":"16.1.3"},{"status":"affected","version":"16.2.1"},{"status":"affected","version":"16.2.2"},{"status":"affected","version":"16.3.1"},{"status":"affected","version":"16.3.2"},{"status":"affected","version":"16.3.3"},{"status":"affected","version":"16.3.1a"},{"status":"affected","version":"16.3.4"},{"status":"affected","version":"16.3.5"},{"status":"affected","version":"16.3.5b"},{"status":"affected","version":"16.3.6"},{"status":"affected","version":"16.3.7"},{"status":"affected","version":"16.3.8"},{"status":"affected","version":"16.3.9"},{"status":"affected","version":"16.3.10"},{"status":"affected","version":"16.3.11"},{"status":"affected","version":"16.4.1"},{"status":"affected","version":"16.4.2"},{"status":"affected","version":"16.4.3"},{"status":"affected","version":"16.5.1"},{"status":"affected","version":"16.5.1a"},{"status":"affected","version":"16.5.1b"},{"status":"affected","version":"16.5.2"},{"status":"affected","version":"16.5.3"},{"status":"affected","version":"16.6.1"},{"status":"affected","version":"16.6.2"},{"status":"affected","version":"16.6.3"},{"status":"affected","version":"16.6.4"},{"status":"affected","version":"16.6.5"},{"status":"affected","version":"16.6.4a"},{"status":"affected","version":"16.6.5a"},{"status":"affected","version":"16.6.6"},{"status":"affected","version":"16.6.7"},{"status":"affected","version":"16.6.8"},{"status":"affected","version":"16.6.9"},{"status":"affected","version":"16.6.10"},{"status":"affected","version":"16.7.1"},{"status":"affected","version":"16.7.1a"},{"status":"affected","version":"16.7.1b"},{"status":"affected","version":"16.7.2"},{"status":"affected","version":"16.7.3"},{"status":"affected","version":"16.7.4"},{"status":"affected","version":"16.8.1"},{"status":"affected","version":"16.8.1a"},{"status":"affected","version":"16.8.1b"},{"status":"affected","version":"16.8.1s"},{"status":"affected","version":"16.8.1c"},{"status":"affected","version":"16.8.1d"},{"status":"affected","version":"16.8.2"},{"status":"affected","version":"16.8.1e"},{"status":"affected","version":"16.8.3"},{"status":"affected","version":"16.9.1"},{"status":"affected","version":"16.9.2"},{"status":"affected","version":"16.9.1a"},{"status":"affected","version":"16.9.1b"},{"status":"affected","version":"16.9.1s"},{"status":"affected","version":"16.9.3"},{"status":"affected","version":"16.9.4"},{"status":"affected","version":"16.9.3a"},{"status":"affected","version":"16.9.5"},{"status":"affected","version":"16.9.5f"},{"status":"affected","version":"16.9.6"},{"status":"affected","version":"16.9.7"},{"status":"affected","version":"16.9.8"},{"status":"affected","version":"16.10.1"},{"status":"affected","version":"16.10.1a"},{"status":"affected","version":"16.10.1b"},{"status":"affected","version":"16.10.1s"},{"status":"affected","version":"16.10.1c"},{"status":"affected","version":"16.10.1e"},{"status":"affected","version":"16.10.1d"},{"status":"affected","version":"16.10.2"},{"status":"affected","version":"16.10.1f"},{"status":"affected","version":"16.10.1g"},{"status":"affected","version":"16.10.3"},{"status":"affected","version":"16.11.1"},{"status":"affected","version":"16.11.1a"},{"status":"affected","version":"16.11.1b"},{"status":"affected","version":"16.11.2"},{"status":"affected","version":"16.11.1s"},{"status":"affected","version":"16.12.1"},{"status":"affected","version":"16.12.1s"},{"status":"affected","version":"16.12.1a"},{"status":"affected","version":"16.12.1c"},{"status":"affected","version":"16.12.1w"},{"status":"affected","version":"16.12.2"},{"status":"affected","version":"16.12.1y"},{"status":"affected","version":"16.12.2a"},{"status":"affected","version":"16.12.3"},{"status":"affected","version":"16.12.8"},{"status":"affected","version":"16.12.2s"},{"status":"affected","version":"16.12.1x"},{"status":"affected","version":"16.12.1t"},{"status":"affected","version":"16.12.4"},{"status":"affected","version":"16.12.3s"},{"status":"affected","version":"16.12.3a"},{"status":"affected","version":"16.12.4a"},{"status":"affected","version":"16.12.5"},{"status":"affected","version":"16.12.6"},{"status":"affected","version":"16.12.1z1"},{"status":"affected","version":"16.12.5a"},{"status":"affected","version":"16.12.5b"},{"status":"affected","version":"16.12.1z2"},{"status":"affected","version":"16.12.6a"},{"status":"affected","version":"16.12.7"},{"status":"affected","version":"16.12.9"},{"status":"affected","version":"16.12.10"},{"status":"affected","version":"17.1.1"},{"status":"affected","version":"17.1.1a"},{"status":"affected","version":"17.1.1s"},{"status":"affected","version":"17.1.1t"},{"status":"affected","version":"17.1.3"},{"status":"affected","version":"17.2.1"},{"status":"affected","version":"17.2.1r"},{"status":"affected","version":"17.2.1a"},{"status":"affected","version":"17.2.1v"},{"status":"affected","version":"17.2.2"},{"status":"affected","version":"17.2.3"},{"status":"affected","version":"17.3.1"},{"status":"affected","version":"17.3.2"},{"status":"affected","version":"17.3.3"},{"status":"affected","version":"17.3.1a"},{"status":"affected","version":"17.3.1w"},{"status":"affected","version":"17.3.2a"},{"status":"affected","version":"17.3.1x"},{"status":"affected","version":"17.3.1z"},{"status":"affected","version":"17.3.4"},{"status":"affected","version":"17.3.5"},{"status":"affected","version":"17.3.4a"},{"status":"affected","version":"17.3.6"},{"status":"affected","version":"17.3.4b"},{"status":"affected","version":"17.3.4c"},{"status":"affected","version":"17.3.5a"},{"status":"affected","version":"17.3.5b"},{"status":"affected","version":"17.3.7"},{"status":"affected","version":"17.3.8"},{"status":"affected","version":"17.4.1"},{"status":"affected","version":"17.4.2"},{"status":"affected","version":"17.4.1a"},{"status":"affected","version":"17.4.1b"},{"status":"affected","version":"17.4.2a"},{"status":"affected","version":"17.5.1"},{"status":"affected","version":"17.5.1a"},{"status":"affected","version":"17.5.1b"},{"status":"affected","version":"17.5.1c"},{"status":"affected","version":"17.6.1"},{"status":"affected","version":"17.6.2"},{"status":"affected","version":"17.6.1w"},{"status":"affected","version":"17.6.1a"},{"status":"affected","version":"17.6.1x"},{"status":"affected","version":"17.6.3"},{"status":"affected","version":"17.6.1y"},{"status":"affected","version":"17.6.1z"},{"status":"affected","version":"17.6.3a"},{"status":"affected","version":"17.6.4"},{"status":"affected","version":"17.6.1z1"},{"status":"affected","version":"17.6.5"},{"status":"affected","version":"17.6.6"},{"status":"affected","version":"17.7.1"},{"status":"affected","version":"17.7.1a"},{"status":"affected","version":"17.7.1b"},{"status":"affected","version":"17.7.2"},{"status":"affected","version":"17.10.1"},{"status":"affected","version":"17.10.1a"},{"status":"affected","version":"17.10.1b"},{"status":"affected","version":"17.8.1"},{"status":"affected","version":"17.8.1a"},{"status":"affected","version":"17.9.1"},{"status":"affected","version":"17.9.1w"},{"status":"affected","version":"17.9.2"},{"status":"affected","version":"17.9.1a"},{"status":"affected","version":"17.9.1x"},{"status":"affected","version":"17.9.1y"},{"status":"affected","version":"17.9.3"},{"status":"affected","version":"17.9.2a"},{"status":"affected","version":"17.9.1x1"},{"status":"affected","version":"17.9.3a"},{"status":"affected","version":"17.9.4"},{"status":"affected","version":"17.9.1y1"},{"status":"affected","version":"17.11.1"},{"status":"affected","version":"17.11.1a"},{"status":"affected","version":"17.12.1"},{"status":"affected","version":"17.12.1a"},{"status":"affected","version":"17.11.99SW"}]}],"descriptions":[{"lang":"en","value":"A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of root. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI. A successful exploit could allow the attacker to inject commands to the underlying operating system with root privileges."}],"exploits":[{"lang":"en","value":"Cisco is aware of active exploitation of these vulnerabilities."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"cvssV3_1"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-78","description":"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","lang":"en","type":"cwe"}]}],"providerMetadata":{"dateUpdated":"2024-01-25T16:58:37.816Z","orgId":"d1c1063e-7a18-46af-9102-31f8928bc633","shortName":"cisco"},"references":[{"name":"cisco-sa-iosxe-webui-privesc-j22SaA4z","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z"}],"source":{"advisory":"cisco-sa-iosxe-webui-privesc-j22SaA4z","defects":["CSCwh87343"],"discovery":"EXTERNAL"}}},"cveMetadata":{"assignerOrgId":"d1c1063e-7a18-46af-9102-31f8928bc633","assignerShortName":"cisco","cveId":"CVE-2023-20273","datePublished":"2023-10-24T14:13:36.311Z","dateReserved":"2022-10-27T18:47:50.373Z","dateUpdated":"2025-10-21T23:05:33.896Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"cna_checked":1794262800,"cve":"CVE-2023-20273","description":"A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of root. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI. A successful exploit could allow the attacker to inject commands to the underlying operating system with root privileges.","epss":{"date":"2026-11-12","epss":0.92938,"percentile":0.99834},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2023-20273","cwes":["CWE-78"],"dateAdded":"2023-10-23","dueDate":"2023-10-27","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z;  https://nvd.nist.gov/vuln/detail/CVE-2023-20273","product":"Cisco IOS XE Web UI","requiredAction":"Verify that instances of Cisco IOS XE Web UI are in compliance with BOD 23-02 and apply mitigations per vendor instructions. For affected products (Cisco IOS XE Web UI exposed to the internet or to untrusted networks), follow vendor instructions to determine if a system may have been compromised and immediately report positive findings to CISA.","shortDescription":"Cisco IOS XE contains a command injection vulnerability in the web user interface. When chained with CVE-2023-20198, the attacker can leverage the new local user to elevate privilege to root and write the implant to the file system. Cisco identified CVE-2023-20273 as the vulnerability exploited to deploy the implant. CVE-2021-1435, previously associated with the exploitation events, is no longer believed to be related to this activity.","vendorProject":"Cisco","vulnerabilityName":"Cisco IOS XE Web UI Command Injection Vulnerability"},"kev_checked":1794522003,"products":"Cisco Cisco IOS XE Software","references":["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-20273"],"score":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","provider":"cisco","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"Cisco IOS XE Web UI Command Injection Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[]}