CISA Adds One Known Exploited Vulnerability to Catalog

Summary:

The Cybersecurity and Infrastructure Security Agency (CISA) has added a new vulnerability, CVE-2023-20273, to its Known Exploited Vulnerabilities Catalog due to evidence of active exploitation. This vulnerability is a Cisco IOS XE Web UI Command Injection vulnerability that poses significant risks to the federal enterprise and other organizations. CISA urges Federal Civilian Executive Branch agencies to remediate identified vulnerabilities by the due date to protect their networks against active threats. Additionally, CISA encourages all organizations to prioritize timely remediation of Catalog vulnerabilities as part of their vulnerability management practice.