Skip to main content

Threats Tagged 'cve-2023-20186'

View all threats tagged with 'cve-2023-20186'. Filter and sort to focus on specific types of threats.

Pro Console Lifetime

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

View Plans & Pricing

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

Filter Threats

Narrow down the results by type, severity, or affected countries

Search threats by title, CVE ID, or description. Maximum 100 characters.
Active filters (1):Tag: cve-2023-20186

Threats Tagged 'cve-2023-20186'

Click on any threat for detailed analysis and mitigation recommendations

0

CVE-2023-20186 is a high-severity vulnerability in Cisco IOS and IOS XE software affecting the Authentication, Authorization, and Accounting (AAA) feature. An authenticated attacker with level 15 privileges can exploit improper authorization in SCP command processing to bypass command authorization. This allows unauthorized copying of files to or from the device's file system, potentially leading to configuration disclosure or modification. Exploitation requires valid credentials and no user interaction. The vulnerability impacts confidentiality, integrity, and availability of affected devices. It affects a wide range of Cisco IOS versions, many of which are commonly deployed in enterprise and service provider networks. No known exploits are currently reported in the wild, but the potential impact is significant. European organizations relying on Cisco IOS devices should prioritize patching and access controls to mitigate risk. Countries with large telecom infrastructure and enterprise deployments of Cisco gear are most at risk.

Join the discussion

Showing 1 to 1 of 1 result

Filters:Tag: cve-2023-20186
Page 1 of 1
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses