Unpatched Cisco devices in Australia are still falling prey to the sneaky BadCandy webshell—even after patches were released! What happens when hundreds of systems remain at risk despite warnings? Read more to find out.
https://thedefendopsdiaries.com/australia-warns-of-badcandy-infections-on-unpatched-cisco-devices/
#badcandy
#ciscosecurity
#cyberthreats
#networksecurity
#cve202320198
🚨EXPLOIT POC🚨PoC for CVE-2023-20198 Cisco IOS XE RCE and query released by @W01fh4cker.
#Clearnet #DarkWebInformer #DarkWeb #Exploit #Cyberattack #Cybercrime #Cisco #Infosec #CTI #CVE202320198 #Vulnerability
GitHub: https://github.com/W01fh4cker/CVE-2023-20198-RCE
X Link: https://twitter.com/DarkWebInformer/status/1784360877132525857
Regarding the #Cisco #IOS XE web UI RCE vuln, I wanted to test a few things in a lab environment to help with forensics, detection, etc. But the software is #proprietary and it seems Cisco tries quite hard to make it inaccessible to anyone not paying them. So it's a challenge for #defenders to get some basic answers from a device they control and know is not compromised.
#CensysResearch ran a scan this morning using an updated query, and we are now seeing 41,983 hosts with signs of being compromised by CVE-2023-20198 (that is up from 34,140 reported last night) Read the update: https://censys.com/cve-2023-20198-cisco-ios-xe-zeroday/
Read our full analysis on the #Cisco IOS XE Web UI #zeroDay here: https://censys.com/cve-2023-20198-cisco-ios-xe-zeroday/
As of last night, we're seeing over 34k devices that appear to be compromised...
The #CensysResearch team is continuing to monitor exposure and devices with signs of compromise.
🚨 Our team at Censys is rolling out a new label for #Cisco IOS XE Web UI services in response to CVE-2023-20198:
"labels=cisco-xe-webui"
As of tonight, we're seeing over 34K devices that appear to be compromised.
➡️ Read our full report here:
https://censys.com/cve-2023-20198-cisco-ios-xe-zeroday/
➡️ Find devices on Censys Search: https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=INCLUDE&q=labels%3D%60cisco-xe-webui%60
#CensysResearch #threatResearch #vulnerability #CVE202320198 #zeroDay
Go mitigate your #Cisco IOS XE routers right how. There's a #0day being exploited since September. You'll also need to assess if they are already compromised or not. What a mess.
https://blog.talosintelligence.com/active-exploitation-of-cisco-ios-xe-software/
Cisco has identified active exploitation of two previously unknown vulnerabilities in the Web User Interface (Web UI) feature of Cisco IOS XE software - CVE-2023-20198 and CVE-2023-20273 - when exposed to the internet or untrusted networks.
The DefendOps Diaries
Dark Web Informer 
Gonçalo Ribeiro
Censys
Caitlin Condon
mle✨