{"uuid": "9627b877-750f-4488-8e8d-05a596c3192a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-20198", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/1586", "content": "\u2728 Vulnerabilities &amp; Exploits \u2728\n\nBadCandy Webshell threatens unpatched Cisco IOS XE devices, warns Australian government\n\n\u2014\n\nSummary:\nAustralia warns of attacks on unpatched Cisco IOS XE devices exploiting CVE-2023-20198, allowing BadCandy webshell install. The\u00a0Australian Signals Directorate (ASD) warns of ongoing attacks on unpatched Cisco IOS XE devices exploiting CVE-2023-20198, allowing BadCandy webshell infections and admin takeover. \u201cCyber actors are installing an implant dubbed \u2018BADCANDY\u2019 on Cisco IOS XE devices that are vulnerable [\u2026]\n\n\u2014\n\nSource: Security Affairs\nPublished: 2025-11-01 17:41 | Author: Pierluigi Paganini\n\n#badcandy #webshell #vulnerabilities__exploits\n\nhttps://securityaffairs.com/184095/hacking/badcandy-webshell-threatens-unpatched-cisco-ios-xe-devices-warns-australian-government.html", "creation_timestamp": "2026-09-09T05:00:16.682242Z"}