
Ansible playbook to detect and disable HTTP/HTTPS servers on Cisco IOS XE devices, mitigating CVE-2023-20198 vulnerability with automated configuration auditing.
This is a very simple playbook to detect and disable http/https server to prevent the vulnerability.
Simply use the Cisco Always on Sandbox to test example
ssh [email protected]
pass=lastorangerestoreball8876
conf t
ip http server
ip http secure-server
The syslog output will be empty if the sandbox router hasn't been exploited.