CVE-2023-20113

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF protections for the web-based management interface on an affected system. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user. These actions could include modifying the system configuration and deleting accounts.

• CWE-352
• CWE-352

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vman-csrf-76RDbLEhVendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vman-csrf-76RDbLEhVendor Advisory

Published

Mar 23, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-20107A vulnerability in the deterministic random bit generator (D…7.5
• CVE-2023-20108A vulnerability in the XCP Authentication Service of the Cis…7.5
• CVE-2023-20109A vulnerability in the Cisco Group Encrypted Transport VPN (…6.6
• CVE-2023-20110A vulnerability in the web-based management interface of Cis…6.5
• CVE-2023-20111A vulnerability in the web-based management interface of Cis…6.5
• CVE-2023-20112A vulnerability in Cisco access point (AP) software could al…6.5
• CVE-2023-20114A vulnerability in the file download feature of Cisco Firepo…6.5
• CVE-2023-20115A vulnerability in the SFTP server implementation for Cisco …5.4
• CVE-2023-20116A vulnerability in the Administrative XML Web Service (AXL) …5.7
• CVE-2023-20117Multiple vulnerabilities in the web-based management interfa…7.2
• CVE-2023-20118A vulnerability in the web-based management interface of Cis…7.2
• CVE-2023-20119A vulnerability in the web-based management interface of Cis…6.1