Citrix SD-WAN Appliance 10.2.2 - Authentication Bypass / Remote Command Execution

Exploit Title: Citrix SD-WAN Appliance 10.2.2 Auth Bypass and Remote Command Execution Date: 2019-07-12 Exploit Author: Chris Lyne @lynerc Vendor Homepage: https://www.citrix.com Product: Citrix SD-WAN Software Link: https://www.citrix.com/downloads/citrix-sd-wan/ Version: Tested against 10.2.2...

Citrix SD-WAN Appliance 10.2.2 - Authentication Bypass Remote Command Execution

Citrix SD-WAN Appliance 10.2.2 - Authentication Bypass Remote Command Execution Exploit Title: Citrix SD-WAN Appliance 10.2.2 Auth Bypass and Remote Command Execution Date: 2019-07-12 Exploit Author: Chris Lyne @lynerc Vendor Homepage: https://www.citrix.com Product: Citrix SD-WAN Software Link:...

CVE-2014-3798

The Windows Guest Tools in Citrix XenServer 6.2 SP1 and earlier allows remote attackers to cause a denial of service guest OS crash via a crafted Ethernet frame...

Design/Logic Flaw

The Windows Guest Tools in Citrix XenServer 6.2 SP1 and earlier allows remote attackers to cause a denial of service guest OS crash via a crafted Ethernet frame...

CVE-2014-3798

The Windows Guest Tools in Citrix XenServer 6.2 SP1 and earlier allows remote attackers to cause a denial of service guest OS crash via a crafted Ethernet frame...

CVE-2014-3798

The CVE concerns Citrix XenServer Windows Guest Tools (XenServer Tools) for Windows guests, with vulnerability in the xenvif-facing handling that allows a remote, unauthenticated attacker to crash the guest OS by sending specially crafted Ethernet frames. Affected versions include XenServer 6.2 S...

Workspace app for ios default display settings

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. What is the default setting for Workspace app for iOS on iPhones? Display settings are not all the...

PT-2019-7106

Name of the Vulnerable Software and Affected Versions Citrix XenServer versions 6.2 SP1 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in a guest OS crash, by sending a crafted Ethernet frame. Recommendations For Citrix XenServer versions 6.2 SP1...

CVE-2014-3798: Improper Input Validation

The Windows Guest Tools in Citrix XenServer 6.2 SP1 and earlier allows remote attackers to cause a denial of service guest OS crash via a crafted Ethernet frame...

StoreFront 1906.1.0.27 upgrade and installation issues

The following issues have been discovered with StoreFront1906.1.0.27concerning upgrading and uninstalling: 1. If you attempt to upgrade to StoreFront 1906 from StoreFront 3.7, or from a version of StoreFront that was upgraded from StoreFront 3.7, the upgrade fails. WSP-4386 2. Uninstallation of...

Citrix Hypervisor Security Update.

Description of Problem A vulnerability has been found in Citrix Hypervisor formerly Citrix XenServer that may allow an unauthenticated attacker with the ability to send traffic to a host over a management or storage network to cause the host to crash. This vulnerability is identified as: •...

Updates to Citrix Workspace app installer

Objective This update is applicable to Citrix Workspace app 1904 and above Citrix Workspace app installer starts certain processes during the installation of the software. Citrix Workspace app 1904 for Windows onwards certain changes have been made to the process handling in the installer. Althou...

Citrix SD-WAN Center/Appliance Multiple Vulnerabilities

Citrix SD-WAN Center is a centralized management system for configuring, monitoring, and analyzing all Citrix SD-WAN devices on the WAN. Multiple vulnerabilities exist in Citrix SD-WAN Center/Appliance that can be exploited by attackers to obtain sensitive information...

Citrix SD-WAN Appliance < 10.2.3 Unauthenticated Blind SQL Injection

The remote Citrix SD-WAN Appliance is affected by an SQL injection vulnerability due to improper sanitization of user-supplied input. An unauthenticated, remote attacker can exploit this issue to inject or manipulate SQL queries in the back-end database, resulting in the manipulation of arbitrary...

CVE-2019-12292

Citrix AppDNA before 7 1906.1.0.472 has Incorrect Access Control...

CVE-2019-12292

Citrix AppDNA before 7 1906.1.0.472 has Incorrect Access Control...

Improper access control

Citrix AppDNA before 7 1906.1.0.472 has Incorrect Access Control...

CVE-2019-12292

Citrix AppDNA before 7 1906.1.0.472 has an Improper Access Control vulnerability affecting the web console, potentially enabling privilege escalation and remote code execution. The issue affects AppDNA versions up to and including 7.18. Mitigation: upgrade to 7 1906.1.0.472 or newer and configure...

CVE-2019-12292

Citrix AppDNA before 7 1906.1.0.472 has Incorrect Access Control...

PT-2019-12737

Name of the Vulnerable Software and Affected Versions Citrix AppDNA versions prior to 7.1906.1.0.472 Description The issue is related to Incorrect Access Control. Recommendations For versions prior to 7.1906.1.0.472, update to version 7.1906.1.0.472 or later to resolve the issue...