Honeypot captures suspected Cisco IOS exploit attempt from RootEvidence scanner
VULNERABILITYCVE-2023-20198redteam/daily · 1 source
- Severity
- Medium
- Exploited
- Yes
- Sources
- 1
What happened
A security researcher's trap system recorded someone trying to use an old weakness in Cisco network device software. The attempt tried to run a command that reveals basic information about the system. The scan came from a company that offers vulnerability scanning and included a way to opt out.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Check logs for POST requests to the path /%77ebuiwsmahttps on port 8000.
- Confirm whether any Cisco IOS management interfaces are reachable from the internet.
Written by AI from the sources, checked against them
Vulnerabilities
Full story timeline · 2 updates
Who reported · 1 outlet
SANS Internet Storm Center