Home / Vulnerabilities / CVE-2020-8193
MEDIUM SEVERITY
CVE-2020-8193Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance

Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability

Technical Severity

CVSS v3.1 Metrics

MEDIUM
6.5 / 10
Minimal Risk Critical
Vector Specification
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Exploitation Likelihood

EPSS Prediction

94.36 %
Predictive Probability
Percentile Rank
100.0 th

Documented as more likely to be exploited than 100.0% of known CVEs.

Detection Date

Nov 03, 2021

Remediation Due

May 03, 2022

CISA Catalog Active

Threat Analysis

Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an authorization bypass vulnerability that may allow unauthenticated access to certain URL endpoints. The attacker must have access to the NetScaler IP (NSIP) in order to perform exploitation.

Remediation Directive

Apply updates per vendor instructions.

External Intelligence

NVD

National Vulnerability Database

https://nvd.nist.gov/vuln/detail/CVE-2020-8193