Critical Citrix Flaw May Expose Thousands of Firms to Attacks

guest · Dec 23, 2019

Critical Citrix Flaw May Expose Thousands of Firms to Attacks
December 23, 2019
https://www.bleepingcomputer.com/ne...law-may-expose-thousands-of-firms-to-attacks/

A newly discovered vulnerability impacting the Citrix Application Delivery Controller (NetScaler ADC) and the Citrix Gateway (NetScaler Gateway) could potentially expose the networks of over 80,000 firms to hacking attacks.

The vulnerability, currently tracked as CVE-2019-19781, could allow remote attackers with access to a company's internal network without requiring authentication.
If successfully exploited, it leads to arbitrary code execution according to Positive Technologies' security expert Mikhail Klyuchnikov who discovered the vulnerability.
80,000 firms potentially exposed
Positive Technologies security experts determined "that at least 80,000 companies in 158 countries are potentially at risk with the top 5 countries being "the United States (the absolute leader, with over 38 percent of all vulnerable organizations), the UK, Germany, the Netherlands, and Australia."

"Citrix applications are widely used in corporate networks. This includes their use for providing terminal access of employees to internal company applications from any device via the Internet," Positive Technologies's Director of Security Audit Department Dmitry Serebryannikov said.
Click to expand...

Positive Technologies: Citrix vulnerability allows criminals to hack networks of 80,000 companies

Minimalist · Jan 8, 2020

Attackers Are Scanning for Vulnerable Citrix Servers, Secure Now

Security researchers have observed ongoing scans for Citrix Application Delivery Controller (NetScaler ADC) and Citrix Gateway (NetScaler Gateway) servers vulnerable to attacks exploiting CVE-2019-19781 during the last week.
Click to expand...

https://www.bleepingcomputer.com/ne...ing-for-vulnerable-citrix-servers-secure-now/

guest · Jan 10, 2020

Citrix vulnerability: Concerns mount over as-yet unpatched security flaw
January 10, 2020
https://portswigger.net/daily-swig/...rns-mount-over-as-yet-unpatched-security-flaw

Thousands of enterprises are at heightened risk from a recently discovered vulnerability impacting Citrix products, after it emerged that attackers were actively scouring the web for vulnerable systems.
The vulnerability (CVE-2019-19781), which affects Citrix Application Delivery Controller (ADC) and Gateway products, emerged in mid-December.

Craig Young, a computer security researcher with Tripwire's Vulnerability and Exposures Research Team (VERT), has examined this flaw further in a recent blog post.
He estimated that less than a third of Citrix ADC, formally known as NetScaler ACD, VPN portals had mitigation enabled, some three weeks after Citrix’s initial advisory.

“This is not a particularly difficult flaw to exploit, and it’s almost hard to believe that nobody is exploiting it against real targets yet.”
All this adds up to a pressing need for a comprehensive patch but little or no sense of when this is likely to arrive.

The Daily Swig invited Citrix for an update on Friday but we’re yet to hear back.
Click to expand...

guest · Jan 13, 2020

Brace of Citrix exploits released as race to mitigate intensifies
Vendor promises patch by the end of January
January 13, 2020
https://portswigger.net/daily-swig/brace-of-citrix-exploits-released-as-race-to-mitigate-intensifies

Proof-of-concept code targeting a previously disclosed Citrix vulnerability was published over the weekend in a further sign that widespread attacks may be imminent.

Thin client turned cloud computing vendor Citrix responded by promising patches before the end of the month, setting up a potential race to shore up vulnerable systems before the dangerous vulnerability becomes a vector for cyber-attacks against enterprise networks around the world.
Two proof-of-concept exploits against CVE-2019-19781 (AKA ‘Shitrix’) were released over the weekend against the backdrop of intensified efforts to hunt for vulnerable systems.

A second group of researchers, TrustedSec, followed up on Saturday with the release of their own exploit tool, justifying the release by stating that “exploit code [is] in the wild already”.
Click to expand...

Citrix: Citrix provides update on Citrix ADC, Citrix Gateway vulnerability

We are currently working to develop permanent fixes. As with any product of this nature, and consistent with our policies and procedures, these fixes need to be comprehensive and thoroughly tested. We anticipate making them available for supported versions as follows: [...]

There have been reports of network scanning to detect the presence of this vulnerability. As many deployments are behind the firewall, we believe that a limited number of devices are exploitable. We continue to recommend that all affected customers deploy the previously released mitigation and follow all steps.
Click to expand...

guest · Jan 20, 2020

Citrix finally patches major security flaw
January 20, 2020
https://www.itproportal.com/news/citrix-finally-patches-major-security-flaw/

The recently discovered dangerous vulnerability in Citrix’s ADC software has finally been patched, with the company urging everyone using its platform to update immediately.

The vulnerability, known as CVE-2019-19781, was discovered in December last year by Positive Technologies' Mikhail Klyuchnikov.
The critical path traversal vulnerability was said to be dangerous and allowed hackers to launch arbitrary code execution without the need to be authenticated first. When the vulnerability was first found, some 80,000 businesses across 160 countries were using the software.
Click to expand...

Citrix: Vulnerability Update: First permanent fixes available, timeline accelerated

Permanent fixes for ADC versions 11.1 and 12.0 are available as downloads here and here.
We have moved forward the availability of permanent fixes for other ADC versions and for SD-WAN WANOP from our previous target dates as follows: [...]
Click to expand...

JRViejo · Jan 21, 2020

All eyes are focused on the NSA-promoted CVE-2020-0601 Crypt32.dll vulnerability, for which there are no active attacks. Meh. There’s a much bigger problem with Citrix Application Delivery Controller and Citrix Gateway. If you have any Citrix networking product, get it fixed NOW.
Click to expand...

Don’t worry about CurveBall just yet — get your Citrix systems patched by Woody Leonhard.

guest · Jan 24, 2020

mood said: ↑

Citrix: Vulnerability Update: First permanent fixes available, timeline accelerated
Click to expand...

Citrix releases final fixes for CVE-2019-19781
January 24, 2020
https://www.citrix.com/blogs/2020/01/24/citrix-releases-final-fixes-for-cve-2019-19781/

Today, we released the permanent fix for Citrix Application Delivery Controller (ADC) version 10.5 to address the CVE-2019-19781 vulnerability. We have now released permanent fixes for all supported versions of ADC, Gateway, and SD-WAN WANOP. These fixes are available to download for ADC and Gateway.

As with the permanent fixes made available for Citrix ADC and Citrix Gateway versions 11.1, 12.0, 12.1, 13.0, and Citrix SD-WAN 4000-WO, 5000-WO, 4100-WO, and 5100-WO earlier this week, these fixes are available to all customers regardless of whether they have an active maintenance contract with Citrix. We strongly urge all customers to immediately install these fixes.
Click to expand...

guest · Feb 7, 2020

One out of Every Five Companies Failed to Fix Vulnerability in the Citrix Software, Making the Internal Network Breachable within a Minute
February 6, 2020
https://www.ptsecurity.com/ww-en/ab...-to-fix-vulnerability-in-the-citrix-software/

Critical vulnerability CVE-2019-19781 in Citrix Application Delivery Controller (NetScaler ADC)1 and Citrix Gateway (NetScaler Gateway) was discovered in December by Positive Technologies expert Mikhail Klyuchnikov.
According to Positive Technologies data as of the end of 2019, the greatest number of potentially vulnerable organizations is located in the USA (over 38% of all vulnerable organizations), as well as in Germany, Great Britain, the Netherlands, and Australia.

Overall, the vulnerability is being fixed quickly, but 19 percent of companies are still at risk. The countries with the greatest numbers of vulnerable companies currently include Brazil (43% of all companies where the vulnerability was originally detected), China (39%), Russia (35%), France (34%), Italy (33%), and Spain (25%).
Click to expand...

Log in or Sign up

Critical Citrix Flaw May Expose Thousands of Firms to Attacks

guest Guest

Minimalist Registered Member

guest Guest

guest Guest

guest Guest

JRViejo Super Moderator

guest Guest

guest Guest

Log in or Sign up

Critical Citrix Flaw May Expose Thousands of Firms to Attacks

guest Guest

Minimalist Registered Member

guest Guest

guest Guest

guest Guest

JRViejo Super Moderator

guest Guest

guest Guest

Useful Searches