Description
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP | Citrix ADC and Citrix Gateway 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP 11.1.1a, 11.0.3d and 10.2.7 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 5 repositories
-
jas502n/CVE-2020-8193 ★ 87 · Jul 10, 2020
Citrix ADC Vulns
-
Airboi/Citrix-ADC-RCE-CVE-2020-8193 ★ 45 · Jul 12, 2020
Citrix ADC从权限绕过到RCE
-
PR3R00T/CVE-2020-8193-Citrix-Scanner ★ 8 · Jul 13, 2020
Scanning for CVE-2020-8193 - Auth Bypass check
-
Zeop-CyberSec/citrix_adc_netscaler_lfi ★ 6 · Jul 12, 2020
This Metasploit-Framework module can be use to help companies to check the last Citrix vulnerability CVE-2020-8193, CVE-2020-8195 and CVE-2020-8196 (disclosed July 08, 2020).
-
ctlyz123/CVE-2020-8193 ★ 2 · Jul 15, 2020
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Citrix - Local File Inclusion http/cves/2020/CVE-2020-8193.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.