cisco-sa-vman-csrf-76RDbLEh: Cisco SD-WAN vManage Software Cluster Mode Cross-Site Request Forgery Vulnerability

Published Mar 22, 2023

Updated

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software when it is operating in cluster mode could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system.This vulnerability is due to

Affected Software

1 affected component

cisco SD-WAN vManage Software

Event History

Mar 22, 2023

Advisory Published

04:00 PM

Data Sourced

04:00 PM

DescriptionSeverityWeakness

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2023-20113

Frequently Asked Questions

What is the severity of cisco-sa-vman-csrf-76RDbLEh?

The severity of cisco-sa-vman-csrf-76RDbLEh is considered high due to its potential impact on confidentiality and system integrity.

How do I fix cisco-sa-vman-csrf-76RDbLEh?

To fix cisco-sa-vman-csrf-76RDbLEh, it is recommended to apply the latest security patches provided by Cisco for SD-WAN vManage Software.

Who is affected by cisco-sa-vman-csrf-76RDbLEh?

Organizations using Cisco SD-WAN vManage Software in cluster mode are affected by cisco-sa-vman-csrf-76RDbLEh.

What type of attack is associated with cisco-sa-vman-csrf-76RDbLEh?

The type of attack associated with cisco-sa-vman-csrf-76RDbLEh is a cross-site request forgery (CSRF) attack.

Can cisco-sa-vman-csrf-76RDbLEh be exploited without authentication?

Yes, cisco-sa-vman-csrf-76RDbLEh can be exploited by an unauthenticated remote attacker.