Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2021-1435

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to inject arbitrary commands that can be executed as the root user. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted request to the web UI of an affected device with arbitrary commands injected into a portion of the request. A successful exploit could allow the attacker to execute arbitrary commands as the root user.

CVSS 7.2 · HighBuzz score 38.5

Buzz score

Why this CVE is surfacing

Buzz score total 38.5

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 24.0 · diversity 14.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Mention score
24.0
10 evidence mentions in the snapshot
Diversity score
14.5
5 sources across 2 categories
KEV score
0.0
No KEV entry observed
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
10 source links · newest first
  • Cisco patches IOS XE vulnerabilities actively being exploitedCSO Online

    Cisco has released fixes to address two vulnerabilities – CVE-2023-20198 and CVE-2023-20273 – that hackers exploited to compromise tens of thousands of IOS XE devices. CVE-2023-20198 could allow a remote, unauthenticated attacker to create an account on an affected system with privilege level 15 access. The attacker can then use that account to gain control […]

    newswww.csoonline.comOct 24, 2023, 3:28 PM
  • Cisco Finds Second Zero-Day as Number of Hacked Devices Apparently DropsSecurityWeek

    Cisco has found a second zero-day vulnerability that has been exploited in recent attacks as the number of hacked devices has started dropping.

    newswww.securityweek.comOct 23, 2023, 12:40 PM
  • “Disappearing” implants, followed by first fixes for exploited Cisco IOS XE zero-dayHelp Net Security

    Cisco has released the first fixes for the IOS XE zero-day (CVE-2023-20198) exploited by attackers to ultimately deliver a malicious implant. The fixes were made available on Sunday, but a curious thing happened the day before: several cybersecurity companies and organizations have noticed a drastic reduction in the number of internet-facing Cisco devices that saddled with the implant. The reason behind that change is still unclear, but several theories have been put forward. The attackers … More →

    newswww.helpnetsecurity.comOct 23, 2023, 10:00 AM
  • Over 40,000 Cisco devices exploited with the latest zero-day vulnerabilityCSO Online

    Cisco’s recently disclosed Web UI-based critical zero-day has been confirmed to have more than 40,000 infected hosts, with over a fourth in the US alone. Closely tracking Cisco’s Web UI privilege escalation vulnerability (dubbed CVE-2023-20198), cybersecurity research firm Censys revealed that the number of compromised devices went down slightly on October 19 following hefty jumps […]

    newswww.csoonline.comOct 20, 2023, 11:53 AM
  • CISA adds Cisco IOS XE flaw to its Known Exploited Vulnerabilities catalogSecurity Affairs

    US CISA added the vulnerability CVE-2021-1435 in Cisco IOS XE to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the vulnerability CVE-2021-1435 in Cisco IOS XE to its Known Exploited Vulnerabilities catalog. The vulnerability is a command injection vulnerability in the web user interface that could allow a remote, authenticated attacker to inject commands that […]

    newssecurityaffairs.comOct 20, 2023, 11:08 AM
  • Cisco IOS XE Web UI Vulnerability: A Glimpse into CVE-2023-20198Horizon3.ai

    On Monday, 16 October, Cisco reported a critical zero-day vulnerability in the web UI feature of its IOS XE software actively being exploited by threat actors to install Remote Access Tools (RATs) and backdoor vulnerable devices exposed on the internet.

    exploithorizon3.aiOct 19, 2023, 10:34 PM
  • Number of Cisco Devices Hacked via Unpatched Vulnerability Increases to 40,000SecurityWeek

    The number of Cisco devices hacked via the CVE-2023-20198 zero-day has reached 40,000, including many in the US.

    newswww.securityweek.comOct 19, 2023, 11:01 AM
  • Tens of Thousands of Cisco Devices Hacked via Zero-Day VulnerabilitySecurityWeek

    Tens of thousands of Cisco devices have reportedly been hacked via the exploitation of the zero-day vulnerability CVE-2023-20198.

    newswww.securityweek.comOct 18, 2023, 10:00 AM
  • Cisco Devices Hacked via IOS XE Zero-Day VulnerabilitySecurityWeek

    Cisco is warning customers that a new IOS XE zero-day vulnerability tracked as CVE-2023-20198 is being exploited to hack devices.

    newswww.securityweek.comOct 17, 2023, 10:00 AM
  • Cisco IOS XE zero-day exploited by attackers to deliver implant (CVE-2023-20198)Help Net Security

    A previously unknown vulnerability (CVE-2023-20198) affecting networking devices running Cisco IOS XE software is being exploited by a threat actor to take control of the devices and install an implant, Cisco Talos researchers have warned today. About CVE-2023-20198 CVE-2023-20198 is a privilege escalation vulnerability in the web UI feature of Cisco IOS XE software, which is installed on various Cisco controllers, switches, edge, branch and virtual routers. The web UI is an embedded GUI-based tool … More →

    newswww.helpnetsecurity.comOct 16, 2023, 7:28 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence