CVE-2023-20198 PoC — Cisco IOS XE Software 安全漏洞

Source

https://github.com/mr-r3b00t/CVE-2023-20198-IOS-XE-Scanner

Associated Vulnerability

Title:Cisco IOS XE Software 安全漏洞 (CVE-2023-20198)
Description:Cisco IOS XE Software是美国思科（Cisco）公司的一个操作系统。用于企业有线和无线访问，汇聚，核心和WAN的单一操作系统，Cisco IOS XE降低了业务和网络的复杂性。 Cisco IOS XE Software 存在安全漏洞，该漏洞源于允许未经身份验证的远程攻击者在受影响的系统上创建具有特权的帐户。

Readme

# CVE-2023-20198-IOS-XE-Scanner

Single threaded scanner for a single IP in PowerShell

Very quick and dirty PoC to show the concept. Tested in lab. Use at own risk!

Other scanners (python)

https://github.com/fox-it/cisco-ios-xe-implant-detection

https://github.com/Shadow0ps/CVE-2023-20198-Scanner

File Snapshot


 [4.0K]  /data/pocs/b8bae83f113f697b58a78426e0361add50995581
├── [ 149]  config.json
├── [3.0K]  implant_scanner.ps1
└── [ 302]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!