Citrix Gateway Firmware vulnerabilities

14 CVEs affecting Citrix Gateway Firmware, 5 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-27518, published 2022-12-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-19781: Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability, published 2019-12-27. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 100% chance of exploitation in the next 30 days. An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.
CVE-2020-8193: Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability, published 2020-07-10. Medium severity, CVSS 6.5. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 88.3% chance of exploitation in the next 30 days. Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and…
CVE-2020-8195: Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability, published 2020-07-10. Medium severity, CVSS 6.5. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 33% chance of exploitation in the next 30 days. Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and…
CVE-2020-8196: Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability, published 2020-07-10. Medium severity, CVSS 4.3. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 26.3% chance of exploitation in the next 30 days. Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and…
CVE-2022-27518: Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability, published 2022-12-13. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-12-13. EPSS: 6.9% chance of exploitation in the next 30 days. Unauthenticated remote arbitrary code execution
CVE-2020-8191, published 2020-07-10. Medium severity, CVSS 6.1. EPSS: 23.5% chance of exploitation in the next 30 days. Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and…
CVE-2020-8194, published 2020-07-10. Medium severity, CVSS 6.5. EPSS: 10.8% chance of exploitation in the next 30 days. Reflected code injection in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and…
CVE-2020-10110, published 2020-03-06. Medium severity, CVSS 5.3. EPSS: 2.7% chance of exploitation in the next 30 days. Citrix Gateway 11.1, 12.0, and 12.1 allows Information Exposure Through Caching. NOTE: Citrix disputes this as not a vulnerability. There is no sensitive information disclosure through the cache…
CVE-2020-10111, published 2020-03-06. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. Citrix Gateway 11.1, 12.0, and 12.1 has an Inconsistent Interpretation of HTTP Requests. NOTE: Citrix disputes the reported behavior as not a security issue. Citrix ADC only caches HTTP/1.1 traffic…
CVE-2020-8197, published 2020-07-10. High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days. Privilege escalation vulnerability on Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 allows a low privileged user with management access…

Latest

CVE-2020-8198, published 2020-07-10. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and…
CVE-2020-8190, published 2020-07-10. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Incorrect file permissions in Citrix ADC and Citrix Gateway before versions 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 allows privilege escalation.
CVE-2020-10112, published 2020-03-06. Medium severity, CVSS 5.4. EPSS: 1.5% chance of exploitation in the next 30 days. Citrix Gateway 11.1, 12.0, and 12.1 allows Cache Poisoning. NOTE: Citrix disputes this as not a vulnerability. By default, Citrix ADC only caches static content served under certain URL paths for…