CVE-2023-20198 - Vulnerability Details

Related Threat Clusters

• Ongoing Exploitation of Cisco IOS XE Vulnerability with BadCandy Implant

  Cyberattacks exploiting a critical vulnerability in Cisco IOS XE (CVE-2023-20198) continue, with over 150 devices in Australia still infected with the BadCandy webshell as of late October 2025. Despite patches being…

  8 articles · Updated November 5, 2025
• Ongoing Exploitation of Cisco IOS XE Vulnerability with BADCANDY Webshell

  Cyberattacks exploiting the critical Cisco IOS XE vulnerability (CVE-2023-20198) continue to affect Australian devices, with over 150 routers and switches still infected with the BADCANDY webshell as of late October…

  6 articles · Updated November 1, 2025
• Ongoing BadCandy Infections Target Unpatched Cisco Devices in Australia

  The Australian government has issued a warning about ongoing cyberattacks exploiting CVE-2023-20198, a critical vulnerability in Cisco IOS XE devices. As of late October 2025, over 150 devices in Australia remain…

  2 articles · Updated October 31, 2025

Recent Intelligence Reports

• Badcandy: Old Cisco IOS XE vulnerability still misused thousands of times — Heise.De · November 5, 2025
• Hackers targeting Cisco IOS XE devices with BadCandy implant — Cybersecuritydive · November 5, 2025
• BADCANDY webshell spread via vulnerable Cisco IOS XE device targeting — Scworld · November 3, 2025
• Scores of Australian Cisco devices remain BADCANDY infected — Itnews.Au · November 3, 2025
• BadCandy Webshell threatens unpatched Cisco IOS XE devices, warns Australian government — Securityaffairs.Co · November 1, 2025
• Australia warns of BadCandy infections on unpatched Cisco devices — Bleepingcomputer · October 31, 2025
• Hundreds of Australian Devices Compromised with BadCandy Implant — Thecyberexpress · October 31, 2025

Related Entities