Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance
CVE-2020-8195
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
ما هي
Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users.
CISA: Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an information disclosure vulnerability.
ما العمل
Apply updates per vendor instructions.
الموعد النهائي للوكالات الفدرالية الأمريكية: 3 مايو 2022
ثغرات مُستغلّة أخرى من Citrix
| أُضيفت | الثغرة | المنتج | الخطورة | احتمال الهجوم |
|---|---|---|---|---|
| 03/11/2021 | ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | متوسطة 6.5 | 88% |
| 03/11/2021 | ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | متوسطة 4.3 | 26% |
| 03/11/2021 | ADC, Gateway, and SD-WAN WANOP Appliance Code Execution | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | حرجة 9.8 | >99.9% |
| 04/10/2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer | NetScaler | مرتفع 8.7 | 11% |
| 27/09/2026 | Improper Input Validation | NetScaler | حرجة 9.5 | 82% |
| 27/09/2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer | NetScaler | حرجة 9.5 | 78% |
| 09/09/2026 | Authentication Bypass Using an Alternate Path or Channel | NetScaler | حرجة 9.3 | 33% |
| 26/08/2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer | NetScaler ADC and NetScaler Gateway | مرتفع 8.8 | 1.0% |
المصادر: Known Exploited Vulnerabilities (CISA، ملكية عامة)، وCVE records (cve.org)، وEPSS (FIRST). احتمال الهجوم هو تقدير EPSS لاحتمال أن يحاول أحد استغلال الثغرة خلال الأيام الـ30 القادمة.