Citrix Bugs Allow Unauthenticated Code Injection, Data Theft

guest · Jul 7, 2020

Citrix fixes 11 flaws in ADC, Gateway, and SD-WAN WANOP appliances
July 7, 2020
https://www.bleepingcomputer.com/ne...s-in-adc-gateway-and-sd-wan-wanop-appliances/

Citrix today patched a set of 11 vulnerabilities found to affect its Citrix ADC, Citrix Gateway, and Citrix SD-WAN WANOP (appliance models 4000-WO, 4100-WO, 5000-WO, and 5100-WO) networking products.

According to Citrix, these vulnerabilities are not related to CVE-2019-19781 remote code execution flaw the company patched in January 2020 and do not affect cloud versions of Citrix appliances.
The patches released today by Citrix fully resolve all the security issues, and customers are urged to apply them as soon as possible to defend against potential attacks designed to exploit them.

"There are barriers to many of these attacks; in particular, for customers where there is no untrustworthy traffic on the management network, the remaining risk reduces to a denial-of-service attack," Citrix's CISO Fermin J. Serna explains.
Click to expand...

Denial of service, privilege escalation, and code injection
A security advisory with detailed information on these vulnerabilities and links to all the firmware updates is available on the Citrix website.

A list of all vulnerabilities fixed by Citrix in ADC, Gateway, and SD-WAN WANOP appliances can be found in the table embedded below, together with CVE IDs, the affected products, and pre-conditions needed for exploitation.
Click to expand...

Log in or Sign up

Citrix Bugs Allow Unauthenticated Code Injection, Data Theft

guest Guest

Log in or Sign up

Citrix Bugs Allow Unauthenticated Code Injection, Data Theft

guest Guest

Useful Searches