Products
CuratedCurated
Cisco · Catalyst 8300 edge / SD-WAN router
Cisco C8300-1N1S-4T2X
Platform: Cisco IOS XE
cpe:2.3:o:cisco:ios_xe:-:*:*:*:*:*:*:*
Exposure
Critical. Web UI zero-days apply; Smart Install does NOT — the 8300 edge router does not run that client-switch feature.
Applicable CVEs
7
On CISA KEV
4
Threat actors
2
Urgency
Critical
Vulnerabilities
| CVE | Severity | EPSS | KEV | Exploits | Actors | Source | |
|---|---|---|---|---|---|---|---|
| CVE-2023-20198 | Critical · 10.0 | 100% | KEV | 35 | 2 | Curated | |
| CVE-2023-20273 | High · 7.2 | 90% | KEV | 1 | 2 | Curated |
Threat actor activity
Salt Typhoon
Threat actor · China (state)
Living-off-the-land across telecom carriers; JumbledPath Go tool for packet capture and log erasure.
BadCandy mass exploitation (unattributed)
Campaign · Unknown (Oct 2023)
Chained the IOS XE Web UI zero-days to implant the BadCandy Lua web shell on 40,000+ devices.
Indicators of compromise
No indicators of compromise recorded. Run AI enrichment to research IOCs.