The remote Citrix ADC or Citrix NetScaler Gateway device is version 10.5.x prior to 10.5-70.18, 11.1.x prior to 11.1-64.14, 12.0.x prior to 12.0-63.21, 12.1.x prior to 12.1-57.18, 12.1-FIPS prior to 12.1-55.179 or 13.0.x prior to 13.0-58.30.
It is, therefore, affected by multiple vulnerabilities:

  - An authorization bypass vulnerability exists in Citrix ADC and NetScaler Gateway devices. An     unauthenticated remote attacker with access to the NSIP/management interface can exploit this to bypass     authorization. (CVE-2020-8193)

  - A code injection vulnerability exists in Citrix ADC and NetScaler Gateway devices. An unauthenticated     remote attacker with access to the NSIP/management interface can exploit this to create a malicious file     which, if executed by a victim on the management network, could allow the attacker arbitrary code execution     in the context of that user. (CVE-2020-8194)

  - A cross-site scripting vulnerability exists in Citrix ADC and NetScaler Gateway devices. An     unauthenticated remote attacker can exploit this convincing a user to click a specially crafted URL, to     execute arbitrary script code in a user's browser session. (CVE-2020-8191, CVE-2020-8198)

In addition, Citrix ADC and Citrix NetScaler Gateway are also affected by several additional vulnerabilities including configuration-dependent privilege escalations, information disclosures, and a denial of service vulnerability.

Please refer to advisory CTX276688 for more information.

Detections

Analytics

Citrix ADC and Citrix NetScaler Gateway Multiple Vulnerabilities (CTX276688)

high Nessus Plugin ID 138212

Version 1.12

Version 1.11

Version 1.10

Version 1.12 Feb 12, 2024, 5:27 PM Detection Plugin Feed: 202402121727
Version 1.11 Apr 25, 2023, 11:11 PM CVSS temporal metrics (Adjust exploitability metrics for CISA KEV vulnerabilities) Plugin Feed: 202304252311
Version 1.10 Dec 6, 2022, 1:01 AM Reference Plugin Feed: 202212060101