VMware NSX SD-WAN Edge Remote Code Execution (CVE-2018-6961)

A remote code execution vulnerability exists in VMware NSX SD-WAN Edge . Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

PT-2019-13072

Name of the Vulnerable Software and Affected Versions Citrix SD-WAN versions 10.2.x through 10.2.2 Citrix NetScaler SD-WAN versions 10.0.x through 10.0.7 Description The issue is related to Improper Input Validation. Recommendations For Citrix SD-WAN versions 10.2.x through 10.2.2, update to...

PT-2019-13070

Name of the Vulnerable Software and Affected Versions Citrix SD-WAN versions 10.2.x through 10.2.2 Citrix NetScaler SD-WAN versions 10.0.x through 10.0.7 Description The issue is related to improper input validation. Recommendations For Citrix SD-WAN versions 10.2.x through 10.2.2, update to...

PT-2019-13073

Name of the Vulnerable Software and Affected Versions Citrix SD-WAN versions 10.2.x before 10.2.3 Citrix NetScaler SD-WAN versions 10.0.x before 10.0.8 Description The issue allows Directory Traversal. Recommendations For Citrix SD-WAN versions 10.2.x before 10.2.3, update to version 10.2.3 or...

PT-2019-13069

Name of the Vulnerable Software and Affected Versions Citrix SD-WAN versions 10.2.x through 10.2.2 Citrix NetScaler SD-WAN versions 10.0.x through 10.0.7 Description The issue is related to improper input validation. Recommendations For Citrix SD-WAN versions 10.2.x through 10.2.2, update to...

Citrix SD-WAN Center Multiple Command Injection Vulnerabilities (CVE-2019-12985; CVE-2019-12986; CVE-2019-12987; CVE-2019-12988; CVE-2019-12990; CVE-2019-12992)

Multiple Command Injection vulnerabilities exist in Citrix SD-WAN Center. Successful exploitation of these vulnerabilities would allow remote attackers to execute arbitrary commands on the remote host...

CVE-2019-12985: Improper Neutralization of Special Elements used in an OS Command

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation issue 1 of 6...

CVE-2019-12991: Improper Neutralization of Special Elements used in an OS Command

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation issue 5 of 6...

CVE-2019-12989: Improper Neutralization of Special Elements used in an SQL Command

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection...

CVE-2019-12990: Improper Limitation of a Pathname to a Restricted Directory

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory Traversal...

CVE-2019-12988: Improper Neutralization of Special Elements used in an OS Command

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation issue 4 of 6...

PT-2019-13071

Name of the Vulnerable Software and Affected Versions Citrix SD-WAN versions 10.2.x through 10.2.2 Citrix NetScaler SD-WAN versions 10.0.x through 10.0.7 Description The issue is related to improper input validation. Recommendations For Citrix SD-WAN versions 10.2.x through 10.2.2, update to...

CVE-2019-12987: Improper Neutralization of Special Elements used in an OS Command

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation issue 3 of 6...

CVE-2019-12992: Improper Neutralization of Special Elements used in an OS Command

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation issue 6 of 6...

CVE-2019-12986: Improper Neutralization of Special Elements used in an OS Command

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation issue 2 of 6...

Citrix SD-WAN Appliance 10.2.2 Authentication Bypass / Remote Command Execution

Exploit Title: Citrix SD-WAN Appliance 10.2.2 Auth Bypass and Remote Command Execution Date: 2019-07-12 Exploit Author: Chris Lyne @lynerc Vendor Homepage: https://www.citrix.com Product: Citrix SD-WAN Software Link: https://www.citrix.com/downloads/citrix-sd-wan/ Version: Tested against 10.2.2...

PT-2019-6313

Name of the Vulnerable Software and Affected Versions Citrix SD-WAN versions 10.2.x through 10.2.2 NetScaler SD-WAN versions 10.0.x through 10.0.7 Description The issue is related to improper input validation in the management interface component of NetScaler SD-WAN and Citrix SD-WAN, which can b...

PT-2019-6315

Name of the Vulnerable Software and Affected Versions Citrix SD-WAN versions 10.2.x through 10.2.2 NetScaler SD-WAN versions 10.0.x through 10.0.7 Description The issue is related to a lack of protection against SQL query structure, allowing for SQL injection. This could enable a remote attacker ...

Citrix SD-WAN Appliance 10.2.2 - Authentication Bypass Remote Command Execution

Citrix SD-WAN Appliance 10.2.2 - Authentication Bypass Remote Command Execution Exploit Title: Citrix SD-WAN Appliance 10.2.2 Auth Bypass and Remote Command Execution Date: 2019-07-12 Exploit Author: Chris Lyne @lynerc Vendor Homepage: https://www.citrix.com Product: Citrix SD-WAN Software Link:...

Citrix SD-WAN Appliance 10.2.2 - Authentication Bypass / Remote Command Execution

Exploit Title: Citrix SD-WAN Appliance 10.2.2 Auth Bypass and Remote Command Execution Date: 2019-07-12 Exploit Author: Chris Lyne @lynerc Vendor Homepage: https://www.citrix.com Product: Citrix SD-WAN Software Link: https://www.citrix.com/downloads/citrix-sd-wan/ Version: Tested against 10.2.2...