High severity · published Jul 10, 2020
CVE-2020-8187
Improper input validation in Citrix ADC and Citrix Gateway versions before 11.1-63.9 and 12.0-62.10 allows unauthenticated users to perform a denial of service attack
7.5
CVSS
1.9%
EPSS
No
On KEV
Description
Improper input validation in Citrix ADC and Citrix Gateway versions before 11.1-63.9 and 12.0-62.10 allows unauthenticated users to perform a denial of service attack.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AD
Application Delivery Controller Firmware · Citrix
11.1 before 11.1-63.9; 12.0 before 12.0-62.10 · source: NVD
NG
Netscaler Gateway Firmware · Citrix
11.1 before 11.1-63.9; 12.0 before 12.0-62.10 · source: NVD
Affected product
AD
Application Delivery Controller Firmware
Citrix
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-8187
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-8187
Vendor Advisory
https://support.citrix.com/article/CTX276688
More from Application Delivery Controller Firmware
9.8
CVE-2022-27518
Unauthenticated remote arbitrary code execution
9.8
CVE-2019-19781
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability
6.5
CVE-2020-8195
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
6.5
CVE-2020-8193
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability
4.3
CVE-2020-8196
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability