MSRXVulnerabilities / CVE-2020-8247
CVE-2020-8247
Published 2020-09-18 · Modified
CVE-2020-8247
8.8 HIGH
CVSS 3.1 · NVD
CVSS 3.1 · NVD
1.4%
chance of exploitation in the next 30 days (EPSS; higher than 71% of CVEs)
chance of exploitation in the next 30 days (EPSS; higher than 71% of CVEs)
Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, Citrix SD-WAN WANOP 11.1 before 11.1.2a, Citrix SD-WAN WANOP 11.0 before 11.0.3f, Citrix SD-WAN WANOP 10.2 before 10.2.7b are vulnerable to escalation of privileges on the management interface.
Affected products
- citrix application delivery controller firmware: ≥ 11.1, < 11.1-65.12; ≥ 12.1, < 12.1-58.15; ≥ 13.0, < 13.0-64.35
- citrix gateway: ≥ 11.1, < 11.1-65.12; ≥ 13.0, < 13.0-64.35
- citrix netscaler gateway: ≥ 12.1, < 12.1-58.15
- citrix sd-wan wanop: ≥ 10.2, < 10.2.7b; ≥ 11.0, < 11.0.3f; ≥ 11.1, < 11.1.2a; ≥ 11.2, < 11.2.1a
Weakness: CWE-269
1 references (advisories, patches, write-ups)
- https://support.citrix.com/article/CTX281474 · Vendor Advisory
Sources: NVD, CVE.org, FIRST EPSS. Missing ones did not answer or have no record yet.