CVE-2019-12986

Citrix SD-WAN Center/NetScaler SD-WAN Center are affected by CVE-2019-12986 through an unauthenticated remote command injection in the trace_route function of DiagnosticsController. The issue arises from insufficient validation/sanitation of HTTP request parameters used to construct shell command...

CVE-2019-12986

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation issue 2 of 6...

CVE-2019-12987

Citrix SD-WAN Center / NetScaler SD-WAN Center are affected by CVE-2019-12987 due to improper input validation in the StorageMgmtController’s apply action, where the callStoragePerl helper constructs shell commands from HTTP parameters. An attacker can route traffic through the Collector controll...

CVE-2019-12987

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation issue 3 of 6...

CVE-2019-12988

Citrix SD-WAN Center and NetScaler SD-WAN Center are vulnerable to unauthenticated remote command injection due to improper sanitization of user-supplied input in the addModifyZTDProxy function of NmsController . An attacker can trigger this by routing traffic through the Collector controller and...

CVE-2019-12988

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation issue 4 of 6...

CVE-2019-12989

CVE-2019-12989 affects Citrix SD-WAN 10.2.x prior to 10.2.3 and NetScaler SD-WAN 10.0.x prior to 10.0.8. An unauthenticated attacker can exploit an SQL injection caused by improper input validation in specific components, potentially leading to arbitrary SQL execution against the backend database...

CVE-2019-12989

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection...

CVE-2019-12989

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection...

CVE-2019-12990

CVE-2019-12990 refers to a Local File Inclusion/vulnerability in Citrix SD-WAN Center and NetScaler SD-WAN Center. The Nuclei template and CNVD/Red Hat/ CIRCL entries describe an issue where the applianceSettingsFileTransfer function in ApplianceSettingsController fails to properly validate HTTP ...

CVE-2019-12990

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory Traversal...

CVE-2019-12991

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation issue 5 of 6...

CVE-2019-12991

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation issue 5 of 6...

CVE-2019-12991

CVE-2019-12991 affects Citrix SD-WAN Appliance and NetScaler SD-WAN Appliance: authenticated command injection in 10.2.x before 10.2.3 and 10.0.x before 10.0.8. Connected advisories confirm a remote command execution vector via the appliance’s management/UI stack and public exploits exist (e.g., ...

CVE-2019-12992

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation issue 6 of 6...

CVE-2019-12992

CVE-2019-12992 — Citrix/NetScaler SD-WAN . The issue is an authenticated command injection caused by improper input validation in Citrix SD-WAN Center 10.2.x (before 10.2.3) and NetScaler SD-WAN Center 10.0.x (before 10.0.8). Exploitation would require authentication against the SD-WAN management...

PT-2019-13072

Name of the Vulnerable Software and Affected Versions Citrix SD-WAN versions 10.2.x through 10.2.2 Citrix NetScaler SD-WAN versions 10.0.x through 10.0.7 Description The issue is related to Improper Input Validation. Recommendations For Citrix SD-WAN versions 10.2.x through 10.2.2, update to...

PT-2019-13074

Name of the Vulnerable Software and Affected Versions Citrix SD-WAN versions 10.2.x through 10.2.2 Citrix NetScaler SD-WAN versions 10.0.x through 10.0.7 Description The issue is related to Improper Input Validation. Recommendations For Citrix SD-WAN versions 10.2.x through 10.2.2, update to...

Citrix SD-WAN Center and NetScaler SD-WAN Center Command Injection Vulnerabilities

Citrix Systems SD-WAN Center is a centralized management system from Citrix Systems USA. The system is primarily used to configure, monitor and analyze all Citrix SD-WAN devices on the WAN. A command injection vulnerability exists in Citrix Systems SD-WAN Center versions 10.2.x prior to 10.2.3 an...

Citrix SD-WAN Center Multiple Command Injection Vulnerabilities (CVE-2019-12985; CVE-2019-12986; CVE-2019-12987; CVE-2019-12988; CVE-2019-12990; CVE-2019-12992)

Multiple Command Injection vulnerabilities exist in Citrix SD-WAN Center. Successful exploitation of these vulnerabilities would allow remote attackers to execute arbitrary commands on the remote host...