Cisco Zero-Day Exploited to Implant Malicious Lua Backdoor on Thousands of Devices

The vulnerability, tracked as CVE-2023-20273, allows for privilege escalation through the Web UI. It has been used alongside another vulnerability, CVE-2023-20198, in an exploit chain to deploy a malicious implant.