CISA Updates Guidance for Addressing Cisco IOS XE Web UI Vulnerabilities

Here is a short summary of the provided document in a professional tone:

Summary:

CISA has issued updated guidance addressing vulnerabilities CVE-2023-20198 and CVE-2023-20273 in Cisco's Internetworking Operating System (IOS) XE Software Web User Interface (UI). Cisco has fixed these vulnerabilities in the 17.9.4a release, but fixes are still pending for other release trains. CISA urges organizations to update to the 17.9.4a release and review relevant guidance, including Cisco's Security Advisory and a Cisco Talos blog post. Additionally, CISA has added the vulnerabilities to its Known Exploited Vulnerabilities Catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to remediate them by the specified due date.