criticalKEV
CVE-2023-20198
IOS XE web UI privilege escalation - unauthenticated admin account creation (mass implant campaign)
- Severity
- critical
- Affected product
- Cisco IOS XE Web UI
- Affected versions
- Cisco IOS XE Web UI all versions before the fix
- Detection basis
- Appliance fingerprint
- Shipped rule
- Cisco IOS XE Web UI: IOS XE web UI privilege escalation - unauthenticated admin account creation (mass implant campaign)
- CISA KEV
- Listed as a known exploited vulnerability
- Added to NewScan
- 2026-08-02
- Detected by
- NewScan — free, self-hosted
How NewScan reports it
APPLIANCE FINGERPRINT
NewScan fingerprints the Cisco IOS XE Web UI appliance and reports this CVE when the detected version falls inside the affected range below.
References
Scan for this yourself — local, in-band scanning is free.
Get NewScan (FREE) →Review the measured benchmark, then use the verified remediation process.