Cisco Security Advisories · October 2023 — Cisco Security Advisories
7 advisories 8 CVEs 2 EXPLOITED

PSIRT bulletins (cisco-sa-*) and cross-source CVEs naming Cisco for 2023-10. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 2 are already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

cisco-sa-http2-reset-d8Kf32vZ

Cisco PSIRTExploitedCISA KEV listedCRITICAL2023-10-16

HTTP/2 Rapid Reset Attack Affecting Cisco Products: October 2023

CVEs:CVE-2023-44487

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-189789 affected Cisco
CVRFPID-195936 affected Cisco
CVRFPID-209614 affected Cisco
CVRFPID-213688 affected Cisco
CVRFPID-256410 affected Cisco
CVRFPID-286478 affected Cisco
CVRFPID-292522 affected Cisco
CVRFPID-292558 affected Cisco
CVRFPID-292751 affected Cisco
CVRFPID-7500 affected Cisco
CVRFPID-80720 affected Cisco
Upstream advisory

cisco-sa-iosxe-webui-privesc-j22SaA4z

Cisco PSIRTExploitedCISA KEV listedHIGH2023-10-16

Multiple Vulnerabilities in Cisco IOS XE Software Web UI Feature

CVEs:CVE-2023-20198CVE-2023-20273

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-212436 affected Cisco
CVRFPID-213100 affected Cisco
CVRFPID-213809 affected Cisco
CVRFPID-213960 affected Cisco
CVRFPID-214051 affected Cisco
CVRFPID-214993 affected Cisco
CVRFPID-217253 affected Cisco
CVRFPID-217255 affected Cisco
CVRFPID-217256 affected Cisco
CVRFPID-217257 affected Cisco
CVRFPID-217259 affected Cisco
CVRFPID-218901 affected Cisco
CVRFPID-218903 affected Cisco
CVRFPID-218905 affected Cisco
CVRFPID-220802 affected Cisco
CVRFPID-222711 affected Cisco
CVRFPID-225784 affected Cisco
CVRFPID-225856 affected Cisco
CVRFPID-225858 affected Cisco
CVRFPID-226330 affected Cisco
CVRFPID-227918 affected Cisco
CVRFPID-227920 affected Cisco
CVRFPID-228706 affected Cisco
CVRFPID-229124 affected Cisco
CVRFPID-229187 affected Cisco
CVRFPID-231187 affected Cisco
CVRFPID-231389 affected Cisco
CVRFPID-231390 affected Cisco
CVRFPID-231667 affected Cisco
CVRFPID-231682 affected Cisco
CVRFPID-232008 affected Cisco
CVRFPID-232461 affected Cisco
CVRFPID-232767 affected Cisco
CVRFPID-233155 affected Cisco
CVRFPID-235307 affected Cisco
CVRFPID-235858 affected Cisco
CVRFPID-236834 affected Cisco
CVRFPID-236837 affected Cisco
CVRFPID-237460 affected Cisco
CVRFPID-239264 affected Cisco
CVRFPID-241736 affected Cisco
CVRFPID-242308 affected Cisco
CVRFPID-242834 affected Cisco
CVRFPID-243362 affected Cisco
CVRFPID-244070 affected Cisco
CVRFPID-244071 affected Cisco
CVRFPID-244530 affected Cisco
CVRFPID-244900 affected Cisco
CVRFPID-245375 affected Cisco
CVRFPID-245377 affected Cisco
CVRFPID-247629 affected Cisco
CVRFPID-248242 affected Cisco
CVRFPID-249171 affected Cisco
CVRFPID-250629 affected Cisco
CVRFPID-251075 affected Cisco
CVRFPID-251165 affected Cisco
CVRFPID-251166 affected Cisco
CVRFPID-251225 affected Cisco
CVRFPID-252045 affected Cisco
CVRFPID-252235 affected Cisco
CVRFPID-252271 affected Cisco
CVRFPID-252272 affected Cisco
CVRFPID-252913 affected Cisco
CVRFPID-252914 affected Cisco
CVRFPID-254688 affected Cisco
CVRFPID-254712 affected Cisco
CVRFPID-257955 affected Cisco
CVRFPID-257984 affected Cisco
CVRFPID-258170 affected Cisco
CVRFPID-258229 affected Cisco
CVRFPID-258388 affected Cisco
CVRFPID-258900 affected Cisco
CVRFPID-260741 affected Cisco
CVRFPID-260917 affected Cisco
CVRFPID-261240 affected Cisco
CVRFPID-261241 affected Cisco
CVRFPID-261465 affected Cisco
CVRFPID-262389 affected Cisco
CVRFPID-262390 affected Cisco
CVRFPID-262549 affected Cisco
CVRFPID-262588 affected Cisco
CVRFPID-262590 affected Cisco
CVRFPID-262592 affected Cisco
CVRFPID-262595 affected Cisco
CVRFPID-263804 affected Cisco
CVRFPID-264096 affected Cisco
CVRFPID-265735 affected Cisco
CVRFPID-265841 affected Cisco
CVRFPID-266259 affected Cisco
CVRFPID-267110 affected Cisco
CVRFPID-267240 affected Cisco
CVRFPID-267605 affected Cisco
CVRFPID-268921 affected Cisco
CVRFPID-270097 affected Cisco
CVRFPID-271798 affected Cisco
CVRFPID-271938 affected Cisco
CVRFPID-272047 affected Cisco
CVRFPID-272932 affected Cisco
CVRFPID-273112 affected Cisco
CVRFPID-273445 affected Cisco
CVRFPID-273448 affected Cisco
CVRFPID-273509 affected Cisco
CVRFPID-273563 affected Cisco
CVRFPID-273649 affected Cisco
CVRFPID-274818 affected Cisco
CVRFPID-274832 affected Cisco
CVRFPID-275538 affected Cisco
CVRFPID-276837 affected Cisco
CVRFPID-277099 affected Cisco
CVRFPID-277147 affected Cisco
CVRFPID-277148 affected Cisco
CVRFPID-277194 affected Cisco
CVRFPID-277255 affected Cisco
CVRFPID-277256 affected Cisco
CVRFPID-277321 affected Cisco
CVRFPID-277338 affected Cisco
CVRFPID-277343 affected Cisco
CVRFPID-277348 affected Cisco
CVRFPID-277357 affected Cisco
CVRFPID-277945 affected Cisco
CVRFPID-278002 affected Cisco
CVRFPID-278018 affected Cisco
CVRFPID-278019 affected Cisco
CVRFPID-278020 affected Cisco
CVRFPID-278023 affected Cisco
CVRFPID-278025 affected Cisco
CVRFPID-278402 affected Cisco
CVRFPID-278504 affected Cisco
CVRFPID-278881 affected Cisco
CVRFPID-279338 affected Cisco
CVRFPID-279339 affected Cisco
CVRFPID-280463 affected Cisco
CVRFPID-280555 affected Cisco
CVRFPID-280651 affected Cisco
CVRFPID-280652 affected Cisco
CVRFPID-280770 affected Cisco
CVRFPID-280783 affected Cisco
CVRFPID-280801 affected Cisco
CVRFPID-280899 affected Cisco
CVRFPID-280937 affected Cisco
CVRFPID-280938 affected Cisco
CVRFPID-280939 affected Cisco
CVRFPID-281320 affected Cisco
CVRFPID-281331 affected Cisco
CVRFPID-281438 affected Cisco
CVRFPID-281654 affected Cisco
CVRFPID-282017 affected Cisco
CVRFPID-282028 affected Cisco
CVRFPID-282046 affected Cisco
CVRFPID-282115 affected Cisco
CVRFPID-282116 affected Cisco
CVRFPID-282117 affected Cisco
CVRFPID-283831 affected Cisco
CVRFPID-283835 affected Cisco
CVRFPID-284161 affected Cisco
CVRFPID-284178 affected Cisco
CVRFPID-284179 affected Cisco
CVRFPID-284331 affected Cisco
CVRFPID-284740 affected Cisco
CVRFPID-285325 affected Cisco
CVRFPID-285326 affected Cisco
CVRFPID-285327 affected Cisco
CVRFPID-285328 affected Cisco
CVRFPID-285329 affected Cisco
CVRFPID-286031 affected Cisco
CVRFPID-286409 affected Cisco
CVRFPID-286410 affected Cisco
CVRFPID-286477 affected Cisco
CVRFPID-286486 affected Cisco
CVRFPID-286498 affected Cisco
CVRFPID-286534 affected Cisco
CVRFPID-286544 affected Cisco
CVRFPID-286594 affected Cisco
CVRFPID-286799 affected Cisco
CVRFPID-286801 affected Cisco
CVRFPID-286802 affected Cisco
CVRFPID-287087 affected Cisco
CVRFPID-287125 affected Cisco
CVRFPID-288221 affected Cisco
CVRFPID-288247 affected Cisco
CVRFPID-289372 affected Cisco
CVRFPID-290562 affected Cisco
CVRFPID-290565 affected Cisco
CVRFPID-290580 affected Cisco
CVRFPID-290596 affected Cisco
CVRFPID-290660 affected Cisco
CVRFPID-290669 affected Cisco
CVRFPID-290671 affected Cisco
CVRFPID-290673 affected Cisco
CVRFPID-290674 affected Cisco
CVRFPID-290675 affected Cisco
CVRFPID-292510 affected Cisco
CVRFPID-292650 affected Cisco
CVRFPID-292656 affected Cisco
CVRFPID-292698 affected Cisco
CVRFPID-292876 affected Cisco
CVRFPID-294838 affected Cisco
CVRFPID-295198 affected Cisco
CVRFPID-295398 affected Cisco
CVRFPID-295412 affected Cisco
CVRFPID-295421 affected Cisco
CVRFPID-296860 affected Cisco
CVRFPID-299967 affected Cisco
CVRFPID-300012 affected Cisco
Upstream advisory

cisco-sa-curl-libcurl-D9ds39cV

Cisco PSIRTPoC exploitCRITICAL2023-10-12

cURL and libcurl Vulnerability Affecting Cisco Products: October 2023

CVEs:CVE-2023-38545

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-273559 affected Cisco
CVRFPID-285963 affected Cisco
CVRFPID-6588 affected Cisco
Upstream advisory

cisco-sa-cucm-apidos-PGsDcdNF

Cisco PSIRTCoalition ESS < 30%HIGH2023-10-04

Multiple Cisco Unified Communications Products Unauthenticated API High CPU Utilization Denial of Service Vulnerability

CVEs:CVE-2023-20259

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-189784 affected Cisco
CVRFPID-203614 affected Cisco
CVRFPID-4844 affected Cisco
CVRFPID-73608 affected Cisco
CVRFPID-88444 affected Cisco
Upstream advisory

cisco-sa-rdocker-uATbukKn

Cisco PSIRTCoalition ESS < 30%HIGH2023-10-04

Cisco IOx Application Hosting Environment Privilege Escalation Vulnerability

CVEs:CVE-2023-20235

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-254712 affected Cisco
CVRFPID-262588 affected Cisco
CVRFPID-262590 affected Cisco
CVRFPID-262592 affected Cisco
CVRFPID-277099 affected Cisco
CVRFPID-277357 affected Cisco
CVRFPID-278018 affected Cisco
CVRFPID-278019 affected Cisco
CVRFPID-278020 affected Cisco
CVRFPID-278023 affected Cisco
CVRFPID-278025 affected Cisco
CVRFPID-279338 affected Cisco
CVRFPID-279339 affected Cisco
CVRFPID-280555 affected Cisco
CVRFPID-280770 affected Cisco
CVRFPID-280783 affected Cisco
CVRFPID-280899 affected Cisco
CVRFPID-281331 affected Cisco
CVRFPID-282017 affected Cisco
CVRFPID-282028 affected Cisco
CVRFPID-282046 affected Cisco
CVRFPID-282115 affected Cisco
CVRFPID-282116 affected Cisco
CVRFPID-282117 affected Cisco
CVRFPID-284161 affected Cisco
CVRFPID-284178 affected Cisco
CVRFPID-284179 affected Cisco
CVRFPID-284331 affected Cisco
CVRFPID-284740 affected Cisco
CVRFPID-285326 affected Cisco
CVRFPID-285327 affected Cisco
CVRFPID-285328 affected Cisco
CVRFPID-285329 affected Cisco
CVRFPID-286409 affected Cisco
CVRFPID-286410 affected Cisco
CVRFPID-286477 affected Cisco
CVRFPID-286486 affected Cisco
CVRFPID-286498 affected Cisco
CVRFPID-286534 affected Cisco
CVRFPID-286544 affected Cisco
CVRFPID-286594 affected Cisco
CVRFPID-286799 affected Cisco
CVRFPID-286801 affected Cisco
CVRFPID-286802 affected Cisco
CVRFPID-287087 affected Cisco
CVRFPID-287125 affected Cisco
CVRFPID-288221 affected Cisco
CVRFPID-288247 affected Cisco
CVRFPID-289372 affected Cisco
CVRFPID-290565 affected Cisco
CVRFPID-290580 affected Cisco
CVRFPID-290596 affected Cisco
CVRFPID-290660 affected Cisco
CVRFPID-290671 affected Cisco
CVRFPID-290673 affected Cisco
CVRFPID-290674 affected Cisco
CVRFPID-290675 affected Cisco
CVRFPID-292650 affected Cisco
CVRFPID-292698 affected Cisco
CVRFPID-292876 affected Cisco
CVRFPID-294838 affected Cisco
CVRFPID-295198 affected Cisco
CVRFPID-295412 affected Cisco
CVRFPID-296860 affected Cisco
CVRFPID-299967 affected Cisco
CVRFPID-300012 affected Cisco
CVRFPID-300845 affected Cisco
CVRFPID-300850 affected Cisco
CVRFPID-306636 affected Cisco
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.