Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-18225

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway before 10.5 build 70.8, 11.x before 11.1 build 63.9, 12.0 before build 62.10, 12.1 before build 54.16, and 13.0 before build 41.28. An attacker with management-interface access can bypass authentication to obtain appliance administrative access. These products formerly used the NetScaler brand name.

Published

2019-10-21T18:15:10.680

Last Modified

2024-11-21T04:32:52.460

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System citrix application_delivery_controller_firmware 10.5 Yes
Operating System citrix application_delivery_controller_firmware 11.1 Yes
Operating System citrix application_delivery_controller_firmware 12.0 Yes
Operating System citrix application_delivery_controller_firmware 12.1 Yes
Operating System citrix application_delivery_controller_firmware 13.0 Yes
Hardware citrix application_delivery_controller - No
Operating System citrix netscaler_gateway_firmware 10.5 Yes
Operating System citrix netscaler_gateway_firmware 11.1 Yes
Operating System citrix netscaler_gateway_firmware 12.0 Yes
Operating System citrix netscaler_gateway_firmware 12.1 Yes
Hardware citrix netscaler_gateway - No
Operating System citrix gateway_firmware 13.0 Yes
Hardware citrix gateway - No
References