CVE-2020-8193

🗓️ 10 Jul 2020 15:38:28Reported by hackeroneType

cve🔗 web.nvd.nist.gov📰️ 9 Media mentions👁 1119 Views

Improper access control in Citrix ADC & Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints

Reporter	Title	Published	Views	Family All 30
zdt	Citrix ADC NetScaler Local File Inclusion Exploit	14 Nov 202000:00	–	zdt
GithubExploit	Exploit for Improper Authentication in Citrix Application_Delivery_Controller_Firmware	12 Jul 202013:37	–	githubexploit
ICS	Potential for China Cyber Response to Heightened U.S.–China Tensions	20 Oct 202012:00	–	ics
ATTACKERKB	CVE-2020-8196	10 Jul 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-8195	10 Jul 202000:00	–	attackerkb
ATTACKERKB	CTX276688: Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP appliance Security Update	9 Jul 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-8193	10 Jul 202000:00	–	attackerkb
BDU FSTEC	The vulnerabilities of the Citrix ADC application delivery controller (formerly Citrix NetScaler Application Delivery Controller), the Citrix Gateway virtual environment access control system (formerly Citrix NetScaler Gateway), and the Citrix SD-WAN WANOP network management software are related to authentication process flaws, allowing attackers to compromise the confidentiality and integrity of protected information.	15 Feb 202300:00	–	bdu_fstec
Circl	CVE-2020-8193	11 Jul 202015:39	–	circl
CISA KEV Catalog	Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability	3 Nov 202100:00	–	cisa_kev

NVD

Node

citrix application_delivery_controller_firmwareRange10.5–10.5-70.18

citrix application_delivery_controller_firmwareRange11.1–11.1-64.14

citrix application_delivery_controller_firmwareRange12.0–12.0-63.21

citrix application_delivery_controller_firmwareRange12.1–12.1-57.18

citrix application_delivery_controller_firmwareRange13.0–13.0-58.30

Node

citrix netscaler_gateway_firmwareRange10.5–10.5-70.18

citrix netscaler_gateway_firmwareRange11.1–11.1-64.14

citrix netscaler_gateway_firmwareRange12.0–12.0-63.21

citrix netscaler_gateway_firmwareRange12.1–12.1-57.18

Node

citrix gateway_firmwareRange13.0–13.0-58.30

Node

AND

citrix sd-wan_wanopRange10.2–10.2.7

citrix sd-wan_wanopRange11.0–11.0.3d

citrix sd-wan_wanopRange11.1–11.1.1a

citrix 4000-woMatch-

citrix 4100-woMatch-

citrix 5000-woMatch-

citrix 5100-woMatch-

[
  {
    "product": "Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Citrix ADC and Citrix Gateway 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP 11.1.1a, 11.0.3d and 10.2.7"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local-File-Inclusion.html
support	www.support.citrix.com/article/CTX276688
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

17 Jun 2026 03:26Current

6.5Medium risk

Vulners AI Score6.5

CVSS 25

CVSS 3.16.5

EPSS0.88411

SSVC

cve-2020-8193 citrix adc citrix gateway citrix sdwan wan-op vulnerability access control unauthenticated access nvd