CVE-2023-20113 Cisco SD-WAN vManage Software Cross-Site Request Forgery Vulnerability

Medium 6.5 Published 23 Mar 2023 Updated 28 Oct 2024

An attacker can trick users into performing unauthorized actions like modifying configuration or deleting accounts via CSRF in Cisco SD-WAN vManage.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-20113?

CVE-2023-20113 is a medium-severity vulnerability in Cisco SD-WAN vManage, published on 23 Mar 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF protections for the web-based management interface on an affected system. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user. These actions could include modifying the system configuration and deleting accounts.

Weakness: CWE-352

Which versions are affected by CVE-2023-20113?

It affects 1 product.

Products include Cisco Sd-Wan.

How do I fix CVE-2023-20113?

No fix has been published for CVE-2023-20113 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-20113 being exploited?

There is no known exploitation of CVE-2023-20113 in the wild and no public exploit code.

Sources

Also known as GHSA-4g7q-85g4-qw3w.