NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2024-5491 and CVE-2024-5492

Description of Problem Two vulnerabilities have been discovered in NetScaler ADC formerly Citrix ADC and NetScaler Gateway formerly Citrix Gateway. Refer to below for further details: Affected Versions The following supported versions of NetScaler ADC and NetScaler Gateway are affected by the...

Citrix ShareFile StorageZones Controller Multiple Security Updates

Description of Problem Two security issues have been identified within Citrix ShareFile StorageZones Controller that, if exploited, could allow a compromised or malicious ShareFile user to write arbitrary files as that Active Directory user to the local file system, and also to discover the full...

Session Launch Failure: “Your session 'AppName' did not launch successfully due to error code 3500

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. When launching an application or desktop session using Citrix Workspace App, the session fails to...

CVE-2018-18883 - Citrix XenServer Security Update

Description of Problem A security issue has been identified in Citrix XenServer that may allow a malicious administrator of an HVM guest VM to crash the host. This issue affects the following versions of Citrix XenServer: Citrix XenServer 7.6 Citrix XenServer 7.5 Citrix XenServer 7.1 LTSR CU1 The...

Citrix XenServer Multiple Security Updates

Description of Problem Two issues have been identified within Citrix XenServer, which could, if exploited, allow unprivileged code in a PV guest VM to cause the host to crash or become unresponsive. These vulnerabilities affect all currently supported versions of Citrix XenServer up to and...

CVE-2018-5314 - Authentication Bypass Vulnerability in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway

Description of Problem A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway that, if exploited, could allow an unauthenticated attacker with access to the NetScaler management interface to bypass authenticati...

CVE-2016-6493 - Memory Permission Weakness in Citrix XenApp and XenDesktop

Description of Problem A weakness has been identified in Citrix XenApp and XenDesktop. While this issue is not directly exploitable, it could potentially weaken an existing security mitigation, resulting in a loss of defence in depth. This weakness affects the following Citrix products: Citrix...

CVE-2016-4810 - Vulnerability in Citrix Studio Could Result in Insecure Access Policy Configuration

Description of Problem A vulnerability has been identified in Citrix Studio that could allow Access Policy rules to be set insecurely on the Citrix XenDesktop Delivery Controller. This vulnerability affects the following product versions: Citrix XenDesktop 7.x between versions 7.0 and 7.6...

BSOD with Error: "STOP 0x0000007E and CVhdMp.sys Error: BNIStack failed, network stack could not be initialized"

When attempting to boot Vdisks from Target device a BSOD occurs with the following message: STOP" 0x0000007E and CVhdMp.sys Error: BNIStack failed, network stack could not be initialized...

Service 'Citrix Workspace Updater Service' (CWAUpdaterService) Failed to Start When Installing CWA

Failed to install CWA. Error message shows:Service 'Citrix Workspace Updater Service' CWAUpdaterService failed to start, Verify that you have sufficient privileges to start system services...

Citrix MSI Log Analyzer

Citrix MSI Log Analyzer v1.2.0.9 Created Date: Dec 04, 2017 Updated Date:May 29, 2019 To help us improve the tool, please send your feedback tohttps://podio.com/webforms/18778954/1263577. Please note: You can download the required file from the Citrix downloads website by visiting the following...

CVE-2016-6273 - Denial of Service Vulnerability in Citrix License Server

Description of Problem A vulnerability has been identified in the Citrix License Server for Windows and Citrix License Server VPX that could allow a remote, unauthenticated attacker to crash the License Server. This vulnerability affects all versions of Citrix License Server for Windows and Citri...

CWA 2503 for MAC - Error “There is no Citrix SSL server configured on the specified address

Issue with a users who is unable to launch applications from Citrix Workspace for Mac. When trying to launch an application, the following error is displayed: “Failed to start. There is no Citrix SSL server configured on the specified address.” Issue only occurring for CWA Mac...

BGP Routing and RHI Functionality in NetScaler

This article provides information about BGP routing in NetScaler and some of the sample BGP configurations. It gives a brief overview of the RHI functionality. Route Health Injection RHI The primary purpose of dynamic routing in NetScaler is to communicate the state or health of VIPs to the...

The Non-Maskable Interrupt Button on a NetScaler Appliance

This article contains information about using Non-Maskable Interrupt NMI button on a NetScaler appliance. Requirements Review the NetScaler MPXHardware Platforms and NetScaler SDX Hardware Platforms page, to verify the NetScaler platforms that have the NMI button. NMI Button If the NetScaler...

"Connection timeout" error when launching Desktop sessions

Users are unable to connect to Desktop Sessions. All connections fail with status "Connection Timeout"...

Security Advisory for Citrix Hypervisor

Several security issues have been identified that affect Citrix Hypervisor: An issue has been identified that may allow privileged code in a PV guest VM to cause the host to crash. This issue has the following identifier: CVE-2022-23034 Note that PV guests are supported in Citrix XenServer 7.1 LT...

Citrix Hypervisor Security Update

Description of Problem Two issues have been identified in Citrix Hypervisor that may, if exploited, allow privileged code in an HVM guest VM to compromise or crash the host. These issues only apply in specific configurations; furthermore, Citrix believes that there would be significant difficulty...

Citrix Security Acknowledgements

Citrix would like to thank security researchers who have worked with us to secure Citrix products and services. 2019 Vahagn Vardanian Mohammed Israil Nicholis du Toit Archit Garg of Careem Ismail Tasdelen Andrea Pessione of SKIT Cyber Security Armando Huesca of SKIT Cyber Security Asher Bin Khali...

CVE-2019-6485 - TLS Padding Oracle Vulnerability in Citrix Application Delivery Controller (ADC) and NetScaler Gateway

Description of Problem A vulnerability has been identified in the Citrix Application Delivery Controller ADC formally known as NetScaler ADC and NetScaler Gateway platforms using hardware acceleration that could allow an attacker to exploit the appliance to decrypt TLS traffic. This vulnerability...

CVE-2018-18517 - Cross-Site Scripting Vulnerability in Citrix NetScaler

Description of Problem A Cross-Site Scripting XSS vulnerability has been identified in Citrix NetScaler Gateway, formerly known as Citrix Access Gateway Enterprise Edition and Citrix ADC formerly known as NetScaler ADC, that if exploited by an attacker with access to the NetScaler administrative...

How to Remove XenTools for Clean Install

To remove XenTools from VMs if standard uninstall does not work...

Citrix NetScaler Application Delivery Controller and NetScaler Gateway Multiple Security Updates

Description of Problem A number of vulnerabilities have been identified in supported versions of Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway. The following vulnerabilities have been addressed: CVE-2018-6810: Citrix NetScaler Application Delivery Controller ADC and...

Understanding the Citrix Telemetry Service

Understanding the Citrix Telemetry Service The Citrix Telemetry Service plays a crucial role in maintaining and optimizing the user experience of Citrix products. This feature is designed to collect diagnostic, performance, and usage data from Citrix products back to Citrix. The information...

Hotfix XS82ECU1072 - For Citrix Hypervisor 8.2 Cumulative Update 1

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2 Cumulative Update 1. Note: This hotfix is available only to customers on theCustomer Success Servicesprogram. Information About this Hotfix Prerequisite| None ---|--- Post-update tasks| None Content live...

Error: The Pool Failed to Enable External Authentication in XenServer

When attempting to enable external pool authentication in a XenServer 5.6 Feature Pack 1 pool, the operation fails with one or more of the following errors: “Error: The pool failed to enable external authentication.” “Error: Enabling Active Directory Authentication on pool '' - Could not enable...

How to configure bookmarks on NetScaler Gateway

This is a step-by-step on how to create bookmarks on the NetScaler and attach those to specific AD groups...

Unable open PVS console: The specified authorization group does not exist

Unable open PVS console:The specified authorization group does not exist...

How to install custom FreeBSD configuration files on a Netscaler

As a Netscaler is an appliance, the root filesystem which is a RAMDisk is restored from a non-modifiable image during every boot. As such, modifications to any FreeBSD configuration files in /etc will be erased upon reboot. This article shows how to properly install supported modifications to...

CVE-2017-5571 - Open Redirect Vulnerability in Citrix License Server for Windows and Citrix License Server VPX

Description of Problem An open redirect vulnerability has been identified in the Citrix License Server for Windows and the Citrix License Server VPX. This vulnerability could potentially be used to facilitate a phishing or social engineering attack. This vulnerability has been assigned the...

Citrix Hypervisor Security Update

Description of Problem A number of vulnerabilities have been found in Citrix Hypervisor formerly Citrix XenServer that may: i. Allow the host to be compromised by privileged code in a PV guest VM, ii. allow unprivileged code in a HVM guest VM to cause that guest to crash and iii. under certain...

Upgrading to Storefront 3.12 CU4 fails - MSI logs shows Citrix Protocol Transition service exception

When attempting to upgrade Storefront 3.12 LTSR to CU4 fails. In the Install wizard the following message is displayed: When checking the MSI Installer logs the following exception is found NOTE: MSI logs are found in C:\Windows\Temp\Storefront\CitrixMsi-CitrixStoreFront-x64-201X.-xx-xx-xx.log...

How to check MAC address for interfaces of SDX device

To find the mac address for SDX device interface...

Event ID: 0 & Event ID:1 - Citrix Store cannot be created or added

Unable to create or add a store. Event ID: 0 & Event ID:1 Checking the event viewer on the Storefront server gives the following events- Also, unable to browse an existing store. "The webpage cannot be found."...

[NetScaler-AAA] MAC address EPA scan on macOS 15 may fail

If you have EPA policies to scan Gateway clients MAC address, it may fail after end users upgrading macOS to version 15. Log says, the MAC address predefined in EPA policy cannot be found. Log sample: 2024-09-26 15:54:30 Epa Failed2024-09-26 15:54:30 Case ID : 9fc302024-09-26 15:54:30 Epa log msg...

Security Bulletins for XenServer

This article lists historic security bulletins published for XenServer 8.4. We recommend subscribing to security bulletin email alerts for timely notification of new bulletins. The bulletins advise about any software updates that have been published to address the issues. We highly recommend that...

Provisioning 2203 : Citrix PVS breaks with Microsoft OLEDB driver v19

When upgrading PVS 2203 servers to mitigate a Microsoft OLEDB driver vulnerability CVE-2023-36728, a customer incorrectly removed Microsoft OLE DB Driver 18 and installed Microsoft OLE DB Driver 19. PVS Server 2203 cannot use Microsoft OLE DB Driver 19 to communicate with the SQL server...

Citrix Audio Diagnostic Tool

Citrix Audio Diagnostics tool 1.0.3 What’s new for this release? Support new policy Loss Tolerant Mode for Audio. Optimize the display of network metrics for high round-trip times ICA RTT. Support command-line mode and a runtime option in seconds, allowing the tool to operate in the background fo...

RDP session fails to open, black screen appears briefly and the connection stops

Cannot start RDP session on VDA. A black screen appears briefly and the connection stops...

Audio Volume Persistence Tool

Description When a user reconnects to a XenApp session, all playback audio devices are reset to 100% volume level. Any playback volume settings previously made in the session are lost. This may also happen with a XenDesktop session. This tool restores the volume settings from values stored in the...

How to change the customized icon for published apps in Citrix Cloud using Remote PowerShell SDK

In On-prem environment the icon of a published application can be replaced through the Application properties GUI. However in Citrix Cloud customized icon replacement is not possible from the GUI. We can use Remote PowerShell SDK to get it changed...

CVE-2017-14602 - Authentication Bypass Vulnerability in the Management Interface of Citrix NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN Optimization Edition Appliances

Description of Problem A vulnerability has been identified in the management interface of the Citrix NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN Optimization Edition appliances. This vulnerability, if exploited, could allow an attacker with access to the management interface of the...

Citrix DaaS - Unable to reconnect to a disconnected session

Users attempting to reconnect to their previously disconnected ICA sessions while accessing Citrix Virtual Apps and Desktops CVAD via Citrix Workspace App CWA are unable to do so. The reconnection process fails, potentially leaving users with a frozen or unresponsive application or desktop sessio...

Citrix Provisioning Security Bulletin CVE-2024-6150

Description of Problem A vulnerability has been discovered that impacts Citrix Provisioning. Refer to below for further details: Affected Versions The vulnerability affects the following supported versions of Citrix Provisioning Current Release CR Citrix Provisioning versions before 2402 Long Ter...

Error: "HdxSdkErrorDomain_Session error 8" when launching desktop from iPad device.

Error: "HdxSdkErrorDomainSession error 8" when launching desktop from iPad device. Error message in Japanese: 「接続エラー サーバエラー。サーバはセッションを切断しました。」 「継続的なエラー 次の情報をIT部門にお知らせください：操作を完了できませんでした。HdxSdkErrorDomainSessionエラー8」...

PVS server fail to boot with error “Login request timed out”

High percentage of PVS provisioned desktop servers fail to boot. This is the sequence of the events: 1. The servers boot with an ISO. 2. The tsbbdm.bin is downloaded from the 1st PVS on the site. 3. The streaming process fails. 4. Error pops up :“Login request timed out”. Rebooting the PVS server...

Citrix Cloud Error: "Invalid username, password or token"

A user cannot login to Citrix Workspace and receives the following error message: “Invalid username, password or token” when logging in...

[Citrix Gateway] Can't Launch ICA Desktop/App with Error: 2517

You may observe ICA launch failures with error: 2517 through NetScaler gateway ICA proxy vServer. The issue happens when EDTAdaptive transport is enabled randomly...

Cannot input Simplified/Traditional Chinese or Japanese in Windows server 2019/2022 or Windows 10/11

For Windows Server 2019/2022 English OS or Windows 10/11 as VDA, CWA Windows Client uses Microsoft Pinyin IME to input simplified Chinese, Microsoft Bopomofo IME to input traditional Chinese, or Microsoft Japanese IME to input Japanese, keyboard sync mode is configured as "Sync only once" in...

CVE-2014-8580 - Authentication Flaw in Citrix NetScaler Application Delivery Controller and NetScaler Gateway Could Result in Unauthorised Access to Network Resources

Description of Problem An authentication flaw has been identified in certain configurations of Citrix NetScaler ADC and NetScaler Gateway that could allow an authenticated user to obtain unauthorised access to network resources for another authenticated user. This flaw affects the following...