{"cve_id":"CVE-2023-20273","published":"2023-10-25T18:17:23.017000+00:00","last_modified":"2026-06-17T05:30:12.820000+00:00","vuln_status":"Analyzed","description":"A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of root. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI. A successful exploit could allow the attacker to inject commands to the underlying operating system with root privileges.","cvss_version":"3.1","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","base_score":7.2,"base_severity":"HIGH","attack_vector":"NETWORK","privileges_req":"HIGH","user_interaction":"NONE","scope":"UNCHANGED","impact_c":"HIGH","impact_i":"HIGH","impact_a":"HIGH","cwe_ids":["CWE-78"],"in_kev":true,"kev_date_added":"2023-10-23","kev_ransomware":false,"epss_score":0.92938,"epss_percentile":0.99831,"cap_rule_version":"0.1.1","stage":"EXECUTION","req_access":"PRIV","req_vector":"NETWORK","req_user_interaction":false,"grant_access":"PRIV","caps":["CODE_EXEC"],"terminal":false,"cap_confidence":"high","ingested_at":"2026-09-18T10:41:53.964403+00:00","first_seen":"2023-10-25T18:17:23.017000+00:00","kev_first_seen":"2023-10-23T00:00:00+00:00","novelty_score":0.0,"novelty_reasons":[],"novelty_at":null,"vendors":["cisco"],"products":["catalyst_3650","catalyst_3650-12x48fd-e","catalyst_3650-12x48fd-l","catalyst_3650-12x48fd-s","catalyst_3650-12x48uq","catalyst_3650-12x48uq-e","catalyst_3650-12x48uq-l","catalyst_3650-12x48uq-s","catalyst_3650-12x48ur","catalyst_3650-12x48ur-e","catalyst_3650-12x48ur-l","catalyst_3650-12x48ur-s","catalyst_3650-12x48uz","catalyst_3650-12x48uz-e","catalyst_3650-12x48uz-l","catalyst_3650-12x48uz-s","catalyst_3650-24pd","catalyst_3650-24pd-e","catalyst_3650-24pd-l","catalyst_3650-24pd-s","catalyst_3650-24pdm","catalyst_3650-24pdm-e","catalyst_3650-24pdm-l","catalyst_3650-24pdm-s","catalyst_3650-24ps-e","catalyst_3650-24ps-l","catalyst_3650-24ps-s","catalyst_3650-24td-e","catalyst_3650-24td-l","catalyst_3650-24td-s","catalyst_3650-24ts-e","catalyst_3650-24ts-l","catalyst_3650-24ts-s","catalyst_3650-48fd-e","catalyst_3650-48fd-l","catalyst_3650-48fd-s","catalyst_3650-48fq","catalyst_3650-48fq-e","catalyst_3650-48fq-l","catalyst_3650-48fq-s","catalyst_3650-48fqm","catalyst_3650-48fqm-e","catalyst_3650-48fqm-l","catalyst_3650-48fqm-s","catalyst_3650-48fs-e","catalyst_3650-48fs-l","catalyst_3650-48fs-s","catalyst_3650-48pd-e","catalyst_3650-48pd-l","catalyst_3650-48pd-s","catalyst_3650-48pq-e","catalyst_3650-48pq-l","catalyst_3650-48pq-s","catalyst_3650-48ps-e","catalyst_3650-48ps-l","catalyst_3650-48ps-s","catalyst_3650-48td-e","catalyst_3650-48td-l","catalyst_3650-48td-s","catalyst_3650-48tq-e","catalyst_3650-48tq-l","catalyst_3650-48tq-s","catalyst_3650-48ts-e","catalyst_3650-48ts-l","catalyst_3650-48ts-s","catalyst_3650-8x24pd-e","catalyst_3650-8x24pd-l","catalyst_3650-8x24pd-s","catalyst_3650-8x24uq","catalyst_3650-8x24uq-e","catalyst_3650-8x24uq-l","catalyst_3650-8x24uq-s","catalyst_3850","catalyst_3850-12s-e","catalyst_3850-12s-s","catalyst_3850-12x48u","catalyst_3850-12xs-e","catalyst_3850-12xs-s","catalyst_3850-16xs-e","catalyst_3850-16xs-s","catalyst_3850-24p-e","catalyst_3850-24p-l","catalyst_3850-24p-s","catalyst_3850-24pw-s","catalyst_3850-24s-e","catalyst_3850-24s-s","catalyst_3850-24t-e","catalyst_3850-24t-l","catalyst_3850-24t-s","catalyst_3850-24u","catalyst_3850-24u-e","catalyst_3850-24u-l","catalyst_3850-24u-s","catalyst_3850-24xs","catalyst_3850-24xs-e","catalyst_3850-24xs-s","catalyst_3850-24xu","catalyst_3850-24xu-e","catalyst_3850-24xu-l","catalyst_3850-24xu-s","catalyst_3850-32xs-e","catalyst_3850-32xs-s","catalyst_3850-48f-e","catalyst_3850-48f-l","catalyst_3850-48f-s","catalyst_3850-48p-e","catalyst_3850-48p-l","catalyst_3850-48p-s","catalyst_3850-48pw-s","catalyst_3850-48t-e","catalyst_3850-48t-l","catalyst_3850-48t-s","catalyst_3850-48u","catalyst_3850-48u-e","catalyst_3850-48u-l","catalyst_3850-48u-s","catalyst_3850-48xs","catalyst_3850-48xs-e","catalyst_3850-48xs-f-e","catalyst_3850-48xs-f-s","catalyst_3850-48xs-s","catalyst_3850-nm-2-40g","catalyst_3850-nm-8-10g","ios_xe"],"affected":[{"vendor":"cisco","product":"ios_xe","ranges":["17.3.1z","17.3.2","17.3.2a","17.3.3","17.3.4","17.3.4a","17.3.4b","17.3.4c","17.3.5","17.3.5a","17.3.5b","17.3.6","17.3.7","17.3.8","17.4.1","17.4.1a","17.4.1b","17.4.2","17.4.2a","17.5.1","17.5.1a","17.5.1b","17.5.1c","17.6.1","17.6.1a","17.6.1w","17.6.1x","17.6.1y","17.6.1z","17.6.1z1","17.6.2","17.6.3","17.6.3a","16.1.1","17.6.5","17.6.6","17.7.1","17.7.1a","17.7.1b","17.7.2","17.8.1","17.8.1a","17.9.1","17.9.1a","17.9.1w","17.9.1x","17.9.1x1","17.9.1y","17.9.1y1","17.9.2","17.9.2a","17.9.3","17.9.3a","17.9.4","17.10.1","17.10.1a","17.10.1b","17.11.1","17.11.1a","17.11.99sw","17.12.1","17.12.1a","≥ 17.3 and < 17.3.8a","≥ 17.6 and < 17.6.6a","≥ 17.9 and < 17.9.4a","≥ 16.12 and < 16.12.10a","17.6.4","16.1.2","16.1.3","16.2.1","16.2.2","16.3.1a","16.3.2","16.3.3","16.3.4","16.3.5","16.3.5b","16.3.6","16.3.7","16.3.8","16.3.9","16.3.10","16.3.11","16.4.1","16.4.2","16.4.3","16.5.1","16.5.1a","16.5.1b","16.5.2","16.5.3","16.6.1","16.6.2","16.6.3","16.6.4","16.6.4a","16.6.5","16.6.5a","16.6.6","16.6.7","16.6.8","16.6.9","16.6.10","16.7.1","16.7.1a","16.7.1b","16.7.2","16.7.3","16.7.4","16.8.1","16.8.1a","16.8.1b","16.8.1c","16.8.1d","16.8.1e","16.8.1s","16.8.2","16.8.3","16.9.1","16.9.1a","16.9.1b","16.9.1s","16.9.2","16.9.3","16.9.3a","16.9.4","16.9.5","16.9.5f","16.9.6","16.9.7","16.9.8","16.10.1","16.10.1a","16.10.1b","16.10.1c","16.10.1d","16.10.1e","16.10.1f","16.10.1g","16.10.1s","16.10.2","16.10.3","16.11.1","16.11.1a","16.11.1b","16.11.1s","16.11.2","16.12.1","16.12.1a","16.12.1c","16.12.1s","16.12.1t","16.12.1w","16.12.1x","16.12.1y","16.12.1z1","16.12.1z2","16.12.2","16.12.2a","16.12.2s","16.12.3","16.12.3a","16.12.3s","16.12.4","16.12.4a","16.12.5","16.12.5a","16.12.5b","16.12.6","16.12.6a","16.12.7","16.12.8","16.12.9","16.12.10","17.1.1","17.1.1a","17.1.1s","17.1.1t","17.1.3","17.2.1","17.2.1a","17.2.1r","17.2.1v","17.2.2","17.2.3","17.3.1","17.3.1a","17.3.1w","17.3.1x"]}]}