CVE-2023-20011

CVE-2023-20011 is a high-severity Cross-Site Request Forgery (CSRF) vulnerability affecting the web-based management interfaces of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Network Controller. An unauthenticated, remote attacker can exploit this by tricking an authenticated user into clicking a malicious link. Successful exploitation allows the attacker to perform arbitrary actions with the victim's privileges, potentially leading to full system compromise if the victim has administrative access. While the CVSS score is 8.8 (High), there is no evidence of active exploitation, public exploit code, or inclusion in CISA's KEV catalog, though it has received some community and media attention.