CVE-2023-20109: Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability

Vereiste actie (tekst van CISA, Engels)

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Beschrijving (NVD, Engels)

Cisco IOS and IOS XE contain an out-of-bounds write vulnerability in the Group Encrypted Transport VPN (GET VPN) feature that could allow an authenticated, remote attacker who has administrative control of either a group member or a key server to execute malicious code or cause a device to crash.

BRONNEN

• CISA KEVCISA Known Exploited Vulnerabilities catalog

Andere lekken bij Cisco

• CVE-2026-20320: Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
• CVE-2026-76418: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
• CVE-2026-76519: Cisco Secure Email Gateway Relative Path Traversal Vulnerability
• CVE-2026-76504: Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
• CVE-2026-76460: Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.