Citrix
Citrix Application Delivery Controller Firmware: vulnerabilidades y CVE
Citrix Application Delivery Controller Firmware tiene 30 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 7 son críticas y 5 figuran en el catálogo de explotación activa de CISA.
CVE30
Últimos 12 meses0
Críticas7
Explotadas activamente5
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-27518 | Crítica (9.8) | 6.7% | ⚠ Explotación activa | 13 dic 2022 | Unauthenticated remote arbitrary code execution |
| CVE-2019-19781 | Crítica (9.8) | 100% | ⚠ Explotación activa | 27 dic 2019 | An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal. |
| CVE-2020-8195 | Media (6.5) | 33% | ⚠ Explotación activa | 10 jul 2020 | Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in… |
| CVE-2020-8196 | Media (4.3) | 26% | ⚠ Explotación activa | 10 jul 2020 | Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in… |
| CVE-2020-8193 | Media (6.5) | 88% | ⚠ Explotación activa | 10 jul 2020 | Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows… |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2019-18177 | Media (6.5) | 0.58% | — | 26 dic 2022 | In certain Citrix products, information disclosure can be achieved by an authenticated VPN user when there is a configured SSL VPN endpoint. This affects Citrix ADC and Citrix Gateway 13.0-58.30 and later releases… |
| CVE-2022-27518 | Crítica (9.8) | 6.7% | ⚠ Explotación activa | 13 dic 2022 | Unauthenticated remote arbitrary code execution |
| CVE-2022-27516 | Crítica (9.8) | 0.64% | — | 8 nov 2022 | User login brute force protection functionality bypass |
| CVE-2022-27513 | Crítica (9.6) | 0.29% | — | 8 nov 2022 | Remote desktop takeover via phishing |
| CVE-2022-27510 | Crítica (9.8) | 1.1% | — | 8 nov 2022 | Unauthorized access to Gateway user capabilities |
| CVE-2022-27509 | Media (6.1) | 0.52% | — | 28 jul 2022 | Unauthenticated redirection to a malicious website |
| CVE-2021-22956 | Alta (7.5) | 0.92% | — | 7 dic 2021 | An uncontrolled resource consumption vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface access to cause a… |
| CVE-2021-22955 | Alta (7.5) | 0.92% | — | 7 dic 2021 | A unauthenticated denial of service vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 when configured as a VPN (Gateway) or AAA virtual server could allow an attacker to cause a temporary… |
| CVE-2021-22927 | Alta (8.1) | 0.84% | — | 5 ago 2021 | A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when configured SAML service provider that could allow an attacker to hijack a session. |
| CVE-2021-22919 | Alta (7.5) | 0.94% | — | 5 ago 2021 | A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and… |
| CVE-2020-8300 | Media (6.5) | 3.0% | — | 16 jun 2021 | Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-55.238 suffer from improper access control allowing SAML authentication hijack through a phishing… |
| CVE-2020-8299 | Media (6.5) | 0.42% | — | 16 jun 2021 | Citrix ADC and Citrix/NetScaler Gateway 13.0 before 13.0-76.29, 12.1-61.18, 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238, and Citrix SD-WAN WANOP Edition before 11.4.0, 11.3.2, 11.3.1a, 11.2.3a, 11.1.2c, 10.2.9a… |
| CVE-2020-8247 | Alta (8.8) | 1.4% | — | 18 sept 2020 | Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler… |
| CVE-2020-8246 | Alta (7.5) | 1.6% | — | 18 sept 2020 | Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler… |
| CVE-2020-8245 | Media (6.1) | 0.93% | — | 18 sept 2020 | Improper Input Validation on Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0,… |
| CVE-2020-8198 | Media (6.1) | 0.97% | — | 10 jul 2020 | Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in… |
| CVE-2020-8197 | Alta (8.8) | 1.8% | — | 10 jul 2020 | Privilege escalation vulnerability on Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 allows a low privileged user with management access to execute arbitrary… |
| CVE-2020-8196 | Media (4.3) | 26% | ⚠ Explotación activa | 10 jul 2020 | Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in… |
| CVE-2020-8195 | Media (6.5) | 33% | ⚠ Explotación activa | 10 jul 2020 | Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in… |
| CVE-2020-8194 | Media (6.5) | 11% | — | 10 jul 2020 | Reflected code injection in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows the… |
| CVE-2020-8193 | Media (6.5) | 88% | ⚠ Explotación activa | 10 jul 2020 | Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows… |
| CVE-2020-8191 | Media (6.1) | 26% | — | 10 jul 2020 | Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows… |
| CVE-2020-8190 | Alta (7.5) | 1.2% | — | 10 jul 2020 | Incorrect file permissions in Citrix ADC and Citrix Gateway before versions 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 allows privilege escalation. |
| CVE-2020-8187 | Alta (7.5) | 1.9% | — | 10 jul 2020 | Improper input validation in Citrix ADC and Citrix Gateway versions before 11.1-63.9 and 12.0-62.10 allows unauthenticated users to perform a denial of service attack. |
| CVE-2019-19781 | Crítica (9.8) | 100% | ⚠ Explotación activa | 27 dic 2019 | An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal. |
| CVE-2019-18225 | Crítica (9.8) | 1.5% | — | 21 oct 2019 | An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway before 10.5 build 70.8, 11.x before 11.1 build 63.9, 12.0 before build 62.10, 12.1 before build 54.16, and 13.0 before build 41.28. An… |
| CVE-2018-7218 | Crítica (9.8) | 6.2% | — | 17 may 2018 | The AppFirewall functionality in Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5 before Build 68.7, 11.0 before Build 71.24, 11.1 before Build 58.13, and 12.0 before Build 57.24 allows remote… |
| CVE-2017-17549 | Media (5.9) | 1.6% | — | 13 dic 2017 | Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22 allow remote attackers to obtain… |
| CVE-2017-17382 | Media (5.9) | 14% | — | 13 dic 2017 | Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22 might allow remote attackers to decrypt… |
| CVE-2017-14602 | Alta (7.2) | 2.4% | — | 26 sept 2017 | A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before build 135.18, 10.5 before build 66.9, 10.5e before build… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.