{"id":870,"date":"2023-10-18T14:57:17","date_gmt":"2023-10-18T14:57:17","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/kriticna-ranjivost-cisco-ios-xe-a-ocjena-kriticnosti-10\/"},"modified":"2026-11-04T08:53:36","modified_gmt":"2026-11-04T08:53:36","slug":"kriticna-ranjivost-cisco-ios-xe-a-ocjena-kriticnosti-10","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/ranjivosti\/kriticna-ranjivost-cisco-ios-xe-a-ocjena-kriticnosti-10\/","title":{"rendered":"Kriti\u010dna ranjivost Cisco IOS XE-a, ocjena kriti\u010dnosti 10!"},"content":{"rendered":"<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/over-10-000-cisco-devices-hacked-in-ios-xe-zero-day-attacks\/\">Cisco je otkrio da napada\u010di mogu iskoristiti IOS XE ranjivost nultog dana<\/a> kako bi dobili pune administratorske ovlasti i na daljinu preuzeli kontrolu nad pogo\u0111enim ure\u0111ajem.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Ranjivost <a href=\"https:\/\/cve.cert.hr\/cve\/CVE-2023-20198\">CVE-2023-20198<\/a> je dobila najvi\u0161u ocjenu (10).<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Cisco IOS XE koriste brojni preklopnici (<em>engl. switch<\/em>), razni usmjeriva\u010di (<em>engl. routers<\/em>), pristupne to\u010dke, be\u017ei\u010dni kontroleri i brojni drugi ure\u0111aji.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Ranjivi su fizi\u010dki i virtualni IOS XE sustavi koji koriste Web User Interface (Web UI).<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Uspje\u0161no iskori\u0161tavanje ove ranjivosti omogu\u0107uje napada\u010du stvaranje ra\u010duna na pogo\u0111enom ure\u0111aju s <strong>pristupom najvi\u0161e razine privilegije - 15<\/strong>, \u010dime mu se daje potpuna kontrola nad ure\u0111ajem i dopu\u0161taju mogu\u0107e naknadne neovla\u0161tene aktivnosti.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ako Va\u0161a tvrtka koristi Cisco IOS XE sustav, potrebno je \u0161to prije ustanoviti je li on kompromitiran i poduzeti sve potrebne radnje u za otklanjanje kompromitacije.<\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af19ec4c7b14&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af19ec4c7b14\" class=\"wp-block-image size-large wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2023\/10\/image.png\" alt=\"\" class=\"wp-image-111277\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Korake za provjeru kompromitacije i mitigaciju mo\u017eete prona\u0107i na poveznici:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/sec.cloudapps.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-iosxe-webui-privesc-j22SaA4z\">https:\/\/sec.cloudapps.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-iosxe-webui-privesc-j22SaA4z<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Budu\u0107i da zakrpa jo\u0161 nije dostupna, mitigacijske mjere koje su objavljene od Cisco-a za sad uklju\u010duju uklanjanje javno dostupnih login su\u010delja ure\u0111aja koje koriste Cisco IOS XE.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Dodatne informacije o ranjivosti mo\u017eete prona\u0107i na poveznicama:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/cve.cert.hr\/cve\/CVE-2023-20198\">https:\/\/cve.cert.hr\/cve\/CVE-2023-20198<\/a><br><a href=\"https:\/\/blog.talosintelligence.com\/active-exploitation-of-cisco-ios-xe-software\/\">https:\/\/blog.talosintelligence.com\/active-exploitation-of-cisco-ios-xe-software\/<\/a><br><a href=\"https:\/\/sec.cloudapps.cisco.com\/security\/center\/resources\/forensic_guides\/iosxe_forensic_guide.html\">https:\/\/sec.cloudapps.cisco.com\/security\/center\/resources\/forensic_guides\/iosxe_forensic_guide.html<\/a><\/p>","protected":false},"excerpt":{"rendered":"<p>Cisco je otkrio da napada\u010di mogu iskoristiti IOS XE ranjivost nultog dana kako bi dobili pune administratorske ovlasti i na daljinu preuzeli kontrolu nad pogo\u0111enim ure\u0111ajem. Ranjivost CVE-2023-20198 je dobila najvi\u0161u ocjenu (10). Cisco IOS XE koriste brojni preklopnici (engl. switch), razni usmjeriva\u010di (engl. routers), pristupne to\u010dke, be\u017ei\u010dni kontroleri i brojni drugi ure\u0111aji. Ranjivi su [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1384,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[27],"tags":[],"tema":[],"class_list":["post-870","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ranjivosti"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/870","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=870"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/870\/revisions"}],"predecessor-version":[{"id":1386,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/870\/revisions\/1386"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1384"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=870"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=870"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=870"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=870"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=870"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}