CVE-2020-8196

🗓️ 10 Jul 2020 15:39:54Reported by hackeroneType

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.3

Reporter	Title	Published	Views	Family All 27
0day.today	Citrix ADC NetScaler Local File Inclusion Exploit	14 Nov 202000:00	–	zdt
GithubExploit	Exploit for Improper Authentication in Citrix Application_Delivery_Controller_Firmware	12 Jul 202013:37	–	githubexploit
ICS	Potential for China Cyber Response to Heightened U.S.–China Tensions	20 Oct 202012:00	–	ics
ATTACKERKB	CVE-2020-8196	10 Jul 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-8195	10 Jul 202000:00	–	attackerkb
ATTACKERKB	CTX276688: Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP appliance Security Update	9 Jul 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-8193	10 Jul 202000:00	–	attackerkb
Circl	CVE-2020-8196	11 Oct 202007:02	–	circl
CISA KEV Catalog	Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability	3 Nov 202100:00	–	cisa_kev
Tenable Nessus	Citrix ADC and Citrix NetScaler Gateway Multiple Vulnerabilities (CTX276688)	8 Jul 202000:00	–	nessus

NVD

Node

citrix application_delivery_controller_firmwareRange10.5–10.5-70.18

citrix application_delivery_controller_firmwareRange11.1–11.1-64.14

citrix application_delivery_controller_firmwareRange12.0–12.0-63.21

citrix application_delivery_controller_firmwareRange12.1–12.1-57.18

citrix application_delivery_controller_firmwareRange13.0–13.0-58.30

Node

citrix netscaler_gateway_firmwareRange10.5–10.5-70.18

citrix netscaler_gateway_firmwareRange11.1–11.1-64.14

citrix netscaler_gateway_firmwareRange12.0–12.0-63.21

citrix netscaler_gateway_firmwareRange12.1–12.1-57.18

Node

citrix gateway_firmwareRange13.0–13.0-58.30

Node

citrix sd-wan_wanopRange10.2–10.2.7

citrix sd-wan_wanopRange11.0–11.0.3d

citrix sd-wan_wanopRange11.1–11.1.1a

AND

citrix 4000-woMatch-

citrix 4100-woMatch-

citrix 5000-woMatch-

citrix 5100-woMatch-

[
  {
    "product": "Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Citrix ADC and Citrix Gateway 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP 11.1.1a, 11.0.3d and 10.2.7"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local-File-Inclusion.html
support	www.support.citrix.com/article/CTX276688
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

30 Oct 2025 20:41Current

5Medium risk

Vulners AI Score5

CVSS 24

CVSS 3.14.3

EPSS0.68113

SSVC

cve-2020-8196 citrix adc gateway access control information disclosure nvd