Vulnerability Scans for Older Cisco IOS Vulnerability / Opt-Out Headers, (Thu, Nov 5th)
Summary
The SANS Internet Storm Center observed exploit attempts targeting older Cisco IOS vulnerabilities, specifically suspecting CVE-2023-20198. The analyst noted these were not new exploits but still found them more interesting than other observed activity, such as GeoServer exploits.
IFF Assessment
The article discusses exploit attempts against a Cisco IOS vulnerability, indicating a threat to network infrastructure.
Severity
CISA KEV: Listed as actively exploited. Federal patch due: October 20, 2023. Known ransomware use: Unknown.
Defender Context
This highlights the continued relevance of patching older vulnerabilities in network devices. Defenders should remain vigilant for exploit attempts against Cisco IOS devices and prioritize patching or implementing compensating controls for known critical vulnerabilities like CVE-2023-20198.