Vulnerability Intelligence Report
CVE-2020-8246
Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, Citrix SD-WAN WANOP 11.1 before 11.1.2a, Citrix SD-WAN WANOP 11.0 before 11.0.3f, Citrix SD-WAN WANOP 10.2 before 10.2.7b are vulnerable to a denial of service attack originating from the management network.
No Active Exploit Signals
CVSS Base Score
7.5
HIGH
EPSS Probability:1.55%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-400 ↗Denial of Service (CWE-400)
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| citrix | application_delivery_controller_firmware | all |
| citrix | application_delivery_controller | all |
| citrix | gateway | all |
| citrix | netscaler_gateway | all |
| citrix | sd-wan_wanop | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
1.555%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | HackerOne · Bug Bounty Provider · USA |
| Reserved | 2020-01-28T00:00:00 |
| Published | 2020-09-18T20:12:26 |
| Last Updated | 2024-08-04T09:56:27 |
Community Chatter & Buzz