CVE-2023-20273

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 31, 2025

Last Seen

October 31, 2025

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Ongoing Exploitation of Cisco IOS XE Vulnerability with BadCandy Implant28.9

Cyberattacks exploiting a critical vulnerability in Cisco IOS XE (CVE-2023-20198) continue, with over 150 devices in Australia still infected with the BadCandy webshell as of late October 2025. Despite patches being available for over two years, many devices remain unpatched and vulnerable to re-inf...

Ongoing BadCandy Infections Target Unpatched Cisco Devices in Australia18.1

The Australian government has issued a warning about ongoing cyberattacks exploiting CVE-2023-20198, a critical vulnerability in Cisco IOS XE devices. As of late October 2025, over 150 devices in Australia remain compromised with the BadCandy webshell, despite patches being available since October 2...