CYBERSECURITYTRACKER
Permanent story citation

Vulnerability Scans for Older Cisco IOS Vulnerability / Opt-Out Headers

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 12500

As cited

Copy frozen at (site build).

vulnerabilities

Vulnerability Scans for Older Cisco IOS Vulnerability / Opt-Out Headers

A security researcher observed vulnerability scans targeting Cisco IOS systems with CVE-2023-20198, a critical remote code execution flaw affecting Cisco devices. The scans employed unusual Opt-Out headers claiming association with a vulnerability management platform, and used URL encoding obfuscation in the exploit payload to potentially bypass security controls.

Why it matters: Organizations running vulnerable Cisco IOS versions face active exploitation attempts; patch or implement network segmentation to block SOAP requests to the affected HTTPS management interface immediately.

VendorsAppleCisco
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary