CVE-2020-8272

Authentication Bypass resulting in exposure of SD-WAN functionality in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8...

CVE-2020-8271

Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8...

CVE-2020-8273

Privilege escalation of an authenticated user to root in Citrix SD-WAN center versions before 11.2.2, 11.1.2b and 10.2.8...

CVE-2020-8273

Privilege escalation of an authenticated user to root in Citrix SD-WAN center versions before 11.2.2, 11.1.2b and 10.2.8...

Privilege escalation

Privilege escalation of an authenticated user to root in Citrix SD-WAN center versions before 11.2.2, 11.1.2b and 10.2.8...

Authentication flaw

Authentication Bypass resulting in exposure of SD-WAN functionality in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8...

Remote code execution

Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8...

CVE-2020-8273

CVE-2020-8273 is a CreateAzureDeployment shell injection flaw in Citrix SD-WAN Center. An authenticated attacker can craft JSON data that is (improperly) concatenated into an exec call, enabling arbitrary command execution on vulnerable installations. Affected versions are pre-11.2.2, pre-11.1.2b...

CVE-2020-8273

Privilege escalation of an authenticated user to root in Citrix SD-WAN center versions before 11.2.2, 11.1.2b and 10.2.8...

CVE-2020-8272

CVE-2020-8272 is a ConfigEditor authentication bypass vulnerability in Citrix SD-WAN Center, exposing SD-WAN functionality. Affected are SD-WAN Center versions prior to 11.2.2, 11.1.2b, and 10.2.8. The connected ThreatPost entry confirms an unauthenticated bypass of authentication (ConfigEditor) ...

CVE-2020-8272

Authentication Bypass resulting in exposure of SD-WAN functionality in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8...

CVE-2020-8271

Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8...

CVE-2020-8271

Citrix SD-WAN Center contains CVE-2020-8271, an unauthenticated remote code execution affecting versions before 11.2.2, 11.1.2b, and 10.2.8. The issue is a stop_ping endpoint path traversal that can lead to arbitrary shell commands via user-controlled input, enabling root-level RCE without authen...

Citrix SD-WAN Center Authentication Bypass Vulnerability

Citrix SD-WAN Center is a centralized management system that enables you to configure, monitor, and analyze all Citrix SD-WAN devices on the WAN. An authentication bypass vulnerability exists in Citrix SD-WAN Center versions prior to 11.2.2, 11.1.2b, and 10.2.8, which can be exploited by an...

Citrix SD-WAN Center Remote Code Execution Vulnerability

Citrix SD-WAN Center is a centralized management system that enables you to configure, monitor, and analyze all Citrix SD-WAN devices on the WAN. A remote code execution vulnerability exists in Citrix SD-WAN Center versions prior to 11.2.2, 11.1.2b, and 10.2.8, which can be exploited by an attack...

Citrix SD-WAN Center Elevation of Privilege Vulnerability

Citrix SD-WAN Center is a centralized management system from Citrix Systems. The system is primarily used to configure, monitor and analyze all Citrix SD-WAN devices on the WAN. An elevation of privilege vulnerability exists in Citrix SD-WAN Center versions prior to 11.2.2, 11.1.2b, and 10.2.8,...

Citrix SD-WAN Center 10.2.x < 10.2.8 / 11.1.x < 11.1.2b / 11.2.x < 11.2.2 Multiple Vulnerabilities (CTX285061)

The remote Citrix SD-WAN Center is version 10.2.x prior to 10.2.8, 11.1.x prior to 11.1.2b, 11.2.x prior to 11.2.2. It is, therefore, affected by multiple vulnerabilities: - An unauthenticated remote code execution with root privileges. CVE-2020-8271 - A authentication bypass resulting in exposur...

Silver Peak SD-WAN Bugs Allow for Network Takeover

Silver Peak’s Unity Orchestrator, a software-defined WAN SD-WAN management platform, suffers from three remote code-execution security bugs that can be chained together to allow network takeover by unauthenticated attackers. SD-WAN is a cloud-based networking approach used by enterprises and...

Cisco SD-WAN vManage Software Authorization Bypass (cisco-sa-vmanuafw-ZHkdGGEy)

According to its self-reported version, Cisco SD-WAN vManage is affected by an authentication bypass vulnerability in its web-based management interface due to insufficient authorization checks. An authenticated, remote attacker can exploit this, by sending specially crafted HTTP requests, to...

Cisco SD-WAN Software Privilege Escalation (cisco-sa-vepescm-BjgQm4vJ)

According to its self-reported version, Cisco SD-WAN is affected by a privilege escalation vulnerability. An authenticated, local attacker can exploit this, by sending a crafted request to a utility that is running on an affected system, to gain root privileges. Please see the included Cisco BID...