Unpatched Zero-Day Vulnerability Actively Exploited in Cisco IOS XE

The critical, unpatched security vulnerability identified as CVE-2023-20198 affects Cisco IOS XE software. Cisco IOS XE is a network operating system used in Cisco network devices. The identified flaw is an authentication bypass zero-day vulnerability within the IOS XE software and is actively exploited in the wild. This vulnerability enables unauthenticated attackers to obtain full administrator privileges and take remote control of affected Cisco routers and switches.