Tens of Thousands of Cisco Devices Hacked via Zero-Day Vulnerability

Cisco has warned that tens of thousands of its devices have been hacked due to an exploit in the newly disclosed IOS XE zero-day vulnerability, CVE-2023-20198. The vulnerability gives hackers complete control over targeted systems through the use of unauthenticated level 15 access accounts. Despite Cisco working on a patch, cybersecurity firms say an implant has reached devices that have already been patched against earlier vulnerabilities. The company has urged customers to implement mitigations and VulnCheck has released an open-source tool to scan for the malicious implant.