{"uuid": "2ac6526c-18c6-4f2c-b287-746d8d38d578", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-20109", "type": "exploited", "source": "https://t.me/hacking_Attack/123126", "content": "u can use the following command on the device, replacing \u201cDEVICEIP\u201d with the IP address you are investigating: \"curl -k -X POST \"https[:]//DEVICEIP/webui/logoutconfirm.html?logon_hash=1\"\" \nCisco has committed to providing a software fix for this issue and urges customers to take immediate action, as outlined in their security advisory. The company will continue to update customers on the progress of their investigation through the security advisory channel.\n\nThis recent warning follows Cisco\u2019s previous caution to customers about patching another zero-day vulnerability, CVE-2023-20109, present in its IOS and IOS XE software, which had also been targeted by attackers in the wild.\nTrending: Gaza-Based Cyber Threat Actor \u2018Storm-1133\u2019 Strikes Israeli Energy and Defense Sectors, Microsoft Reveals Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/10/Images-for-the-News-posts-30-300x150.png Game Developers on Steam to Face SMS Security Check in Response to Malicious Updates\nOctober 16, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/10/Images-for-the-News-posts-29-300x150.png Fake .NET Package on NuGet Delivers SeroXen RAT\nOctober 13, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/10/Images-for-the-News-posts-28-300x150.png Malware Poses as WordPress Caching Plugin to Hijack Websites\nOctober 12, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/10/Images-for-the-News-posts-27-300x150.png Massive DDoS Attacks Exploiting HTTP/2 Rapid Reset Zero-Day Vulnerability\nOctober 11, 2023 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking Course\n\nBegin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security Solutions\n\nFind out how Pentesting Services can help you.\nThe post Cisco\u2019s IOS XE Vulnerability Allows Complete Takeover, actively exploited first appeared on Black Hat Ethical Hacking.", "creation_timestamp": "2026-09-04T03:00:04.970728Z"}