Cisco IOS XE CVE-2023-20198 Scanner

A Python wrapper script for scanning Cisco IOS XE devices for the Web UI Authentication Vulnerability (CVE-2023-20198) using a specific curl payload.

Features

• Scans multiple targets from a file or command line
• Uses exact curl command as specified
• Automatically detects HTTP 200 responses (indicating potential vulnerability)
• Professional banner and clear vulnerability reporting
• Saves detailed scan results
• Timeout protection

Requirements

• Python 3.x
• curl command-line tool

Installation

1. Save the script as CVE-2023-20198.py
2. Make it executable:

chmod +x CVE-2023-20198.py

Usage

Scan from file (recommended)

# Create targets file
cat > targets.txt << EOF
http://192.168.1.100/
http://router.company.com/
https://target.example.com/
EOF

# Run scan
./CVE-2023-20198.py -f targets.txt

Save results to file

./CVE-2023-20198.py -f targets.txt -o scan\_results.txt

Direct URLs

./CVE-2023-20198.py --urls http://target1.com/ http://target2.com/

Output Example

When a device returns HTTP 200:

\[!!!] HTTP 200 - Device is Vulnerable with CVE-2023-20198 \[!!!]

Author

Abraham-Surf

Disclaimer

This tool is for educational and authorized security testing purposes only.
Use only on systems you have explicit permission to test.

Legal Notice

CVE-2023-20198 is a critical vulnerability in Cisco IOS XE.
Unauthorized scanning may be illegal in your jurisdiction.