CVE-2021-44519: In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Directory Traversal vulnerability, leading to remote code execution

High severity · published Apr 19, 2022

CVE-2021-44519

In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Directory Traversal vulnerability, leading to remote code execution

8.8

CVSS

2.8%

EPSS

On KEV

Description

In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Directory Traversal vulnerability, leading to remote code execution.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack vector

Network

Complexity

Low

Privileges

Low

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)2.8% · higher than 86% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Xenmobile Server · Citrix

10.13.0; 10.13.0; 10.13.0; 10.13.0; 10.13.0; 10.14.0; +3 more · source: NVD

Affected product

Xenmobile Server

Citrix

All Xenmobile Server CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2021-44519

CVE.org

https://www.cve.org/CVERecord?id=CVE-2021-44519

Vendor Advisory

https://docs.citrix.com/en-us/xenmobile/server/document-history.html

Third Party Advisory

https://gist.github.com/tree-chtsec/30932b9c94b8c7e4209d22b8b52d597f

Vendor Advisory

https://support.citrix.com/article/CTX370551

Third Party Advisory

https://www.chtsecurity.com/news/09be10ae-b50e-46c9-8ce7-2e995fd988fe