Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability

MOYENNE 6.5EXPLOITED (CISA KEV)CVE-2020-8193 · Published 10/07/2020 · updated 17/06/2026

Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 03/11/2021. Patch affected systems as an emergency.

En bref

CVE-2020-8193 est une vulnérabilité MOYENNE (CVSS 6.5).
Exploitée activement : la CISA l'a ajoutée au catalogue KEV le 03/11/2021.
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 88.3%, plus élevée que 99.8% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Citrix	Versions not published yet (product named by CISA KEV)

Description

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints.

References

packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local-File-Inclusion.html · Exploit
support.citrix.com/article/CTX276688 · Vendor Advisory
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2020-8193

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free