CVE-2020-8273

Privilege escalation of an authenticated user to root in Citrix SD-WAN center versions before 11.2.2, 11.1.2b and 10.2.8...

CVE-2020-8271

Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8...

CVE-2020-8271

Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8...

CVE-2020-8272

Authentication Bypass resulting in exposure of SD-WAN functionality in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8...

Remote code execution

Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8...

Privilege escalation

Privilege escalation of an authenticated user to root in Citrix SD-WAN center versions before 11.2.2, 11.1.2b and 10.2.8...

Authentication flaw

Authentication Bypass resulting in exposure of SD-WAN functionality in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8...

CVE-2020-8273

CVE-2020-8273 is a CreateAzureDeployment shell injection flaw in Citrix SD-WAN Center. An authenticated attacker can craft JSON data that is (improperly) concatenated into an exec call, enabling arbitrary command execution on vulnerable installations. Affected versions are pre-11.2.2, pre-11.1.2b...

CVE-2020-8273

Privilege escalation of an authenticated user to root in Citrix SD-WAN center versions before 11.2.2, 11.1.2b and 10.2.8...

CVE-2020-8272

CVE-2020-8272 is a ConfigEditor authentication bypass vulnerability in Citrix SD-WAN Center, exposing SD-WAN functionality. Affected are SD-WAN Center versions prior to 11.2.2, 11.1.2b, and 10.2.8. The connected ThreatPost entry confirms an unauthenticated bypass of authentication (ConfigEditor) ...

CVE-2020-8272

Authentication Bypass resulting in exposure of SD-WAN functionality in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8...

CVE-2020-8271

Citrix SD-WAN Center contains CVE-2020-8271, an unauthenticated remote code execution affecting versions before 11.2.2, 11.1.2b, and 10.2.8. The issue is a stop_ping endpoint path traversal that can lead to arbitrary shell commands via user-controlled input, enabling root-level RCE without authen...

CVE-2020-8271

Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8...

Citrix SD-WAN Center Authentication Bypass Vulnerability

Citrix SD-WAN Center is a centralized management system that enables you to configure, monitor, and analyze all Citrix SD-WAN devices on the WAN. An authentication bypass vulnerability exists in Citrix SD-WAN Center versions prior to 11.2.2, 11.1.2b, and 10.2.8, which can be exploited by an...

Citrix SD-WAN Center Remote Code Execution Vulnerability

Citrix SD-WAN Center is a centralized management system that enables you to configure, monitor, and analyze all Citrix SD-WAN devices on the WAN. A remote code execution vulnerability exists in Citrix SD-WAN Center versions prior to 11.2.2, 11.1.2b, and 10.2.8, which can be exploited by an attack...

Citrix SD-WAN Center Elevation of Privilege Vulnerability

Citrix SD-WAN Center is a centralized management system from Citrix Systems. The system is primarily used to configure, monitor and analyze all Citrix SD-WAN devices on the WAN. An elevation of privilege vulnerability exists in Citrix SD-WAN Center versions prior to 11.2.2, 11.1.2b, and 10.2.8,...

Citrix SD-WAN Center 10.2.x < 10.2.8 / 11.1.x < 11.1.2b / 11.2.x < 11.2.2 Multiple Vulnerabilities (CTX285061)

The remote Citrix SD-WAN Center is version 10.2.x prior to 10.2.8, 11.1.x prior to 11.1.2b, 11.2.x prior to 11.2.2. It is, therefore, affected by multiple vulnerabilities: - An unauthenticated remote code execution with root privileges. CVE-2020-8271 - A authentication bypass resulting in exposur...

Silver Peak SD-WAN Bugs Allow for Network Takeover

Silver Peak’s Unity Orchestrator, a software-defined WAN SD-WAN management platform, suffers from three remote code-execution security bugs that can be chained together to allow network takeover by unauthenticated attackers. SD-WAN is a cloud-based networking approach used by enterprises and...

Cisco SD-WAN Software Arbitrary File Creation (cisco-sa-vsoln-arbfile-gtsEYxns)

According to its self-reported version, Cisco SD-WAN Software is affected by an arbitrary file creation vulnerability due to insufficient input validation for specific commands. An authenticated, local attacker can exploit this, by including crafted arguments to the vulnerable commands, to create...

Cisco SD-WAN Software Privilege Escalation (cisco-sa-vepescm-BjgQm4vJ)

According to its self-reported version, Cisco SD-WAN is affected by a privilege escalation vulnerability. An authenticated, local attacker can exploit this, by sending a crafted request to a utility that is running on an affected system, to gain root privileges. Please see the included Cisco BID...