Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ptsecurityPositive TechnologiesPT-2020-01
HistoryMay 12, 2019 - 12:00 a.m.

PT-2020-01: Arbitrary code execution in Citrix ADC

2019-05-1200:00:00
Positive Technologies
www.ptsecurity.com
23

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.975 High

EPSS

Percentile

100.0%

JSON

PT-2020-01: Arbitrary code execution in Citrix ADC

Citrix Application Delivery Controller (ADC) and Gateway

Severity:

Severity level: High
Impact: Arbitrary code execution in Citrix ADC
Access Vector: Remote

CVSS v3 Base Score: 9.8 HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE: CVE-2019-19781

Vulnerability description:

This vulnerability allows an unauthorized, remote attacker to execute malicious code on the system, obtain unauthorized access to published applications, and attack intranet resources of the target organization via Citrix servers.

Advisory status:

05.12.2019 - Vendor gets vulnerability details 19.01.2020, 22.01.2020 23.01.2020, 24.01.2020 - Vendor releases fixed version and details

Credits:

The vulnerability was discovered by Mikhail Klyuchnikov, Positive Technologies

Related

githubexploit 42
cisa 4
thn 13
attackerkb 2
exploitpack 4
packetstorm 5
ics 18
malwarebytes 4
rapid7blog 2
krebs 1
zdt 3
nessus 3
symantec 1
prion 1
cve 1
nuclei 1
fireeye 5
metasploit 2
qualysblog 9
freebsd 1
cisa_kev 1
citrix 1
checkpoint_advisories 1
canvas 1
talosblog 3
impervablog 2
threatpost 24
cert 1
exploitdb 4
kitploit 2
mssecure 2
securelist 1
avleonov 2
mmpc 1
githubexploit
githubexploit
Exploit for Path Traversal in Citrix Application Delivery Controller Firmware
2020-01-11 03:10:12
Exploit for Path Traversal in Citrix Application Delivery Controller Firmware
2020-01-16 12:33:00
Exploit for Path Traversal in Citrix Application Delivery Controller Firmware
2020-01-16 10:09:05
cisa
cisa
CISA Releases Test for Citrix ADC and Gateway Vulnerability
2020-01-13 00:00:00
Citrix Releases Security Updates for SD-WAN WANOP
2020-01-23 00:00:00
Citrix Adds SD-WAN WANOP, Updated Mitigations to CVE-2019-19781 Advisory
2020-01-17 00:00:00
thn
thn
A Patient Dies After Ransomware Attack Paralyzes German Hospital Systems
2020-09-21 10:20:00
PoC Exploits Released for Citrix ADC and Gateway RCE Vulnerability
2020-01-11 10:21:00
Citrix Releases Patches for Critical ADC Vulnerability Under Active Attack
2020-01-20 14:24:00
attackerkb
attackerkb
CVE-2019-19781
2019-11-05 00:00:00
CVE-2020-12271: Sophos XG Firewall Pre-Auth SQL Injection Vulnerability
2020-04-27 00:00:00
exploitpack
exploitpack
Citrix Application Delivery Controller and Citrix Gateway - Remote Code Execution
2020-01-11 00:00:00
Citrix Application Delivery Controller (ADC) and Gateway 13.0 - Path Traversal
2020-01-16 00:00:00
Citrix Application Delivery Controller and Gateway 10.5 - Remote Code Execution (Metasploit)
2020-01-13 00:00:00
packetstorm
packetstorm
Citrix Application Delivery Controller / Gateway 10.5 Remote Code Execution
2020-01-13 00:00:00
Citrix ADC / Gateway Path Traversal
2020-01-16 00:00:00
Citrix Application Delivery Controller / Gateway Remote Code Execution / Traversal
2020-01-11 00:00:00
ics
ics
Critical Vulnerability in Citrix Application Delivery Controller, Gateway, and SD-WAN WANOP
2020-05-21 12:00:00
COVID-19 Exploited by Malicious Cyber Actors
2020-04-08 12:00:00
Russian Foreign Intelligence Service (SVR) Cyber Operations: Trends and Best Practices for Network Defenders
2021-04-26 12:00:00
malwarebytes
malwarebytes
Healthcare security update: death by ransomware, whatā€™s next?
2020-10-08 15:30:00
Patch now! NSA, CISA, and FBI warn of Russian intelligence exploiting 5 vulnerabilities
2021-04-16 14:59:38
Atomic research institute breached via VPN vulnerability
2021-06-21 13:53:03
rapid7blog
rapid7blog
NICER Protocol Deep Dive: Internet Exposure of Citrix ADC/NetScaler
2020-11-04 15:24:04
Defending Against the Zero Day: Analyzing Attacker Behavior Post-Exploitation of Microsoft Exchange
2021-03-23 14:04:36
krebs
krebs
Hackers Were Inside Citrix for Five Months
2020-02-19 15:55:04
zdt
zdt
Citrix Application Delivery Controller (ADC) and Gateway 13.0 - Path Traversal Exploit
2020-01-16 00:00:00
Citrix Application Delivery Controller and Citrix Gateway - Remote Code Execution Vulnerability (1)
2020-01-11 00:00:00
Citrix Application Delivery Controller and Gateway 10.5 - Remote Code Execution Exploit
2020-01-13 00:00:00
nessus
nessus
Citrix ADC and Citrix NetScaler Gateway Arbitrary Code Execution (CTX267027) (Direct Check)
2020-01-09 00:00:00
FreeBSD : Template::Toolkit -- Directory traversal on write (2bab995f-36d4-11ea-9dad-002590acae31)
2020-01-15 00:00:00
Citrix ADC and Citrix NetScaler Gateway Arbitrary Code Execution (CTX267027)
2019-12-24 00:00:00
symantec
symantec
Multiple Citrix Products CVE-2019-19781 Remote Code Execution Vulnerability
2019-12-17 00:00:00
prion
prion
Directory traversal
2019-12-27 14:15:00
cve
cve
CVE-2019-19781
2019-12-27 14:15:00
nuclei
nuclei
Citrix ADC and Gateway - Directory Traversal
2020-04-05 22:27:04
fireeye
fireeye
Nice Try: 501 (Ransomware) Not Implemented
2020-01-24 17:00:00
404 Exploit Not Found: Vigilante Deploying Mitigation for Citrix NetScaler Vulnerability While Maintaining Backdoor
2020-01-16 00:00:00
Putting the Model to Work: Enabling Defenders With Vulnerability Intelligence ā€” Intelligence for Vulnerability Management, Part Four
2020-04-27 12:30:00
metasploit
metasploit
Citrix ADC (NetScaler) Directory Traversal Scanner
2020-01-13 22:39:05
Citrix ADC (NetScaler) Directory Traversal RCE
2021-04-16 00:13:25
qualysblog
qualysblog
Citrix ADC and Gateway Remote Code Execution Vulnerability (CVE-2019-19781)
2020-01-09 00:12:26
Nefilim Ransomware
2021-05-12 15:34:00
Russia-Ukraine Crisis: How to Strengthen Your Security Posture to Protect against Cyber Attack, based on CISA Guidelines
2022-02-26 20:20:32
freebsd
freebsd
Template::Toolkit -- Directory traversal on write
2019-12-13 00:00:00
cisa_kev
cisa_kev
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability
2021-11-03 00:00:00
citrix
citrix
CVE-2019-19781 - Vulnerability in Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP appliance
2019-12-17 05:00:00
checkpoint_advisories
checkpoint_advisories
Citrix Multiple Products Directory Traversal (CVE-2019-19781)
2020-01-09 00:00:00
canvas
canvas
Immunity Canvas: NETSCALER_TRAVERSAL_RCE
2019-12-27 14:15:00
talosblog
talosblog
Threat Source newsletter (Jan. 30, 2020)
2020-01-30 11:00:12
New Snort rules protect against recently discovered Citrix vulnerability
2020-01-15 11:41:36
Threat Source newsletter (Jan. 16, 2019)
2020-01-23 07:27:43
impervablog
impervablog
Imperva Mitigates Exploits of Citrix Vulnerability ā€“ Right Out of the Box
2020-01-19 15:00:50
Australian Cyber Attack Vectors Blocked Out of the Box by Imperva WAF
2020-07-06 15:01:00
threatpost
threatpost
Postmortem on U.S. Census Hack Exposes Cybersecurity Failures
2021-08-19 14:35:49
RSAC 2019: Microsoft Zero-Day Allows Exploits to Sneak Past Sandboxes
2019-03-05 11:00:03
Citrix Accelerates Patch Rollout For Critical RCE Flaw
2020-01-21 17:19:28
cert
cert
Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP web server vulnerability
2020-01-08 00:00:00
exploitdb
exploitdb
Citrix Application Delivery Controller and Citrix Gateway - Remote Code Execution (PoC)
2020-01-11 00:00:00
Citrix Application Delivery Controller and Gateway 10.5 - Remote Code Execution (Metasploit)
2020-01-13 00:00:00
Citrix Application Delivery Controller and Citrix Gateway - Remote Code Execution
2020-01-11 00:00:00
kitploit
kitploit
ShonyDanza - A Customizable, Easy-To-Navigate Tool For Researching, Pen Testing, And Defending With The Power Of Shodan
2021-12-01 20:30:00
ShonyDanza - A Customizable, Easy-To-Navigate Tool For Researching, Pen Testing, And Defending With The Power Of Shodan
2021-12-27 20:30:00
mssecure
mssecure
Ransomware groups continue to target healthcare, critical services; hereā€™s how to reduce risk
2020-04-28 16:00:49
Ransomware-as-a-service: Understanding the cybercrime gig economy and how to protect yourself
2022-05-09 13:00:00
securelist
securelist
Incident Response Analyst Report 2019
2020-08-06 10:00:34
avleonov
avleonov
Security News: Exchange ProxyShell, Zoom RCE, Citrix Canceled PT Acknowledgments, Cisco No Patch Router RCEs
2021-08-31 23:16:51
Joint Advisory AA22-279A and Vulristics
2022-10-21 20:10:13
mmpc
mmpc
Ransomware-as-a-service: Understanding the cybercrime gig economy and how to protect yourself
2022-05-09 13:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.975 High

EPSS

Percentile

100.0%

JSON
Related for PT-2020-01
githubexploit42cisa4thn13attackerkb2exploitpack4packetstorm5ics18malwarebytes4rapid7blog2krebs1zdt3nessus3symantec1prion1cve1nuclei1fireeye5metasploit2qualysblog9freebsd1cisa_kev1citrix1checkpoint_advisories1canvas1talosblog3impervablog2threatpost24cert1exploitdb4kitploit2mssecure2securelist1avleonov2mmpc1