Cisco finally releases patches for IOS XE vulneabilities

Cisco has released patches to address two zero-day vulnerabilities in its Cisco IOS XE system software, affecting devices such as routers and switches.

The patches available for download through Cisco's software portal, and customers without service contracts can contact Cisco support for assistance.

These vulnerabilities, CVE-2023-20198 and CVE-2023-20273, allowed attackers to gain privileged access and execute commands with root privileges, with the former rated as critical and the latter as high severity.

The vulnerabilites were actively exploited, with the number of affected and compromised devices varying wildly, from several hundred to multiple tens of thousands.