MSRXMSRXSecurity
Vulnerabilities / CVE-2020-8246

CVE-2020-8246

Published 2020-09-18 · Modified

CVE-2020-8246

7.5 HIGH
CVSS 3.1 · NVD
1.6%
chance of exploitation in the next 30 days (EPSS; higher than 75% of CVEs)

Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, Citrix SD-WAN WANOP 11.1 before 11.1.2a, Citrix SD-WAN WANOP 11.0 before 11.0.3f, Citrix SD-WAN WANOP 10.2 before 10.2.7b are vulnerable to a denial of service attack originating from the management network.

Scores

7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HNVD
5.0AV:N/AC:L/Au:N/C:N/I:N/A:PNVD

Affected products

  • citrix application delivery controller firmware: ≥ 11.1, < 11.1-65.12; ≥ 12.1, < 12.1-58.15; ≥ 13.0, < 13.0-64.35
  • citrix gateway: ≥ 11.1, < 11.1-65.12; ≥ 13.0, < 13.0-64.35
  • citrix netscaler gateway: ≥ 12.1, < 12.1-58.15
  • citrix sd-wan wanop: ≥ 10.2, < 10.2.7b; ≥ 11.0, < 11.0.3f; ≥ 11.1, < 11.1.2a; ≥ 11.2, < 11.2.1a

Weakness: CWE-400

1 references (advisories, patches, write-ups)

Sources: NVD, CVE.org, FIRST EPSS. Missing ones did not answer or have no record yet.

Look up another CVECheck your dependenciesScan a website