CVE-2024-2049: Citrix SD-WAN 1000 Firmware

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Server-Side Request Forgery (SSRF) in Citrix SD-WAN Standard/Premium Editions on or after 11.4.0 and before 11.4.4.46 allows an attacker to disclose limited information from the appliance via Access to management IP.

Affected products

Citrix SD-WAN 1000 Firmware: from 11.4.0, before 11.4.4.46 (fixed in 11.4.4.46)
Citrix SD-WAN 1100 Firmware: from 11.4.0, before 11.4.4.46 (fixed in 11.4.4.46)
Citrix SD-WAN 110 Firmware: from 11.4.0, before 11.4.4.46 (fixed in 11.4.4.46)
Citrix SD-WAN 2000 Firmware: from 11.4.0, before 11.4.4.46 (fixed in 11.4.4.46)
Citrix SD-WAN 2100 Firmware: from 11.4.0, before 11.4.4.46 (fixed in 11.4.4.46)
Citrix SD-WAN 210 Firmware: from 11.4.0, before 11.4.4.46 (fixed in 11.4.4.46)
Citrix SD-WAN 4000 Firmware: from 11.4.0, before 11.4.4.46 (fixed in 11.4.4.46)
Citrix SD-WAN 400 Firmware: from 11.4.0, before 11.4.4.46 (fixed in 11.4.4.46)
Citrix SD-WAN 4100 Firmware: from 11.4.0, before 11.4.4.46 (fixed in 11.4.4.46)
Citrix SD-WAN 410 Firmware: from 11.4.0, before 11.4.4.46 (fixed in 11.4.4.46)
Citrix SD-WAN 5100 Firmware: from 11.4.0, before 11.4.4.46 (fixed in 11.4.4.46)
Citrix SD-WAN 6100 Firmware: from 11.4.0, before 11.4.4.46 (fixed in 11.4.4.46)

Published 2024-03-12. Last modified 2026-06-17.