[FALSE-NEGATIVE] CVE-2023-20198 Cisco IOS XE RCE

[sh00bx]

Template IDs or paths

http/cves/2023/CVE-2023-20198.yaml

Environment

- OS: Ubuntu 22.04
- Nuclei: v3.4.4
- Go: 1.23.0

Steps To Reproduce

1. Run template against CVE-2023-20198 vulnerable target on https
2. False negative

The issue is most likely caused by the target endpoint on Cisco differing depending whether access is via http or https. I could achieve detection by modifying the target endpoint on the template to /%2577ebui_wsma_https

Relevant dumped responses

no detection (details below)

Anything else?

post endpoint modification:

[Seb-MIGUEL]

Hey I've seen the same issue as you and thanks a lot for your help. To solve it I've add this part on the template:

The simple update from "%77eb%75i_%77sma_Http" to "%77eb%75i_%77sma_Https" solve my issue, hope that can help the community :)

[sh00bx]

closed with #13536 ,cheers @Facucuervo87