Threats Tagged 'cve-2023-20236'
View all threats tagged with 'cve-2023-20236'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2023-20236'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2023-20236 is a vulnerability in Cisco IOS XR software's iPXE boot function that allows an authenticated local attacker to bypass cryptographic signature verification and install an unverified software image. Exploitation requires local access with high privileges and no user interaction. Successful exploitation can compromise confidentiality, integrity, and availability by booting malicious firmware. The vulnerability affects numerous IOS XR versions widely used in network infrastructure. While no known exploits are reported in the wild, the medium CVSS score reflects the significant impact but limited attack vector. European organizations relying on Cisco IOS XR for critical routing and network functions are at risk, especially in countries with high Cisco market penetration and critical telecom infrastructure. Mitigation involves applying vendor patches once available, restricting local access, and monitoring boot configurations. Countries like Germany, France, UK, Italy, and the Netherlands are most likely affected due to their extensive Cisco deployments and strategic network importance. Join the discussion | CVE Database V5 | 09/13/2023, 16:39:19 UTC Added: 12/16/2025, 17:18:46 UTC |
Showing 1 to 1 of 1 result