Cisco Zero-Day Vulnerability: ReliaQuest Response

ReliaQuest reported an active exploitation of CVE-2023-20198 in Cisco IOS XE— a critical (CVSS 10.0) flaw that permits unauthenticated attackers to create admin accounts and take full control of devices. ReliaQuest has notified impacted customers, recommended Cisco's mitigations (disable HTTP server, restrict HTTP/HTTPS access, save running configuration), is collecting IoCs, and is hunting for publicly exposed IOS XE systems while monitoring for further exploitation and shared POCs.