Back to CVE Browser

CVE-2019-10883

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile27.99th

PublishedJun 3, 2019

Last ModifiedNov 21, 2024

Vulnerability Description

Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow Command Injection.

Affected Platforms (CPE)

📦

Citrix

Citrix Sd Wan Center

>= 10.1.0 and <= 10.1.2

📦

Citrix

Citrix Sd Wan Center

>= 10.2.0 and < 10.2.1

📦

Citrix

Netscaler Sd Wan Center

>= 9.1 and <= 9.3.6

📦

Citrix

Netscaler Sd Wan Center

>= 10.0.0 and < 10.0.7

References & Advisories

🔗 https://support.citrix.com/article/CTX247737

🔗 https://support.citrix.com/v1/search?searchQuery=%22%22&lang=en&sort=cr_date_desc&prod=&pver=&ct=Security+Bulletin

🔗 https://www.tenable.com/security/research

🔗 https://www.tenable.com/security/research/tra-2019-18

🔗 https://support.citrix.com/article/CTX247737

🔗 https://support.citrix.com/v1/search?searchQuery=%22%22&lang=en&sort=cr_date_desc&prod=&pver=&ct=Security+Bulletin

🔗 https://www.tenable.com/security/research

🔗 https://www.tenable.com/security/research/tra-2019-18

Related Vulnerabilities

CVE-2020-82719.8

Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8

CVE-2020-82738.8

Privilege escalation of an authenticated user to root in Citrix SD-WAN center versions before 11.2.2, 11.1.2b and 10.2.8.

CVE-2020-82727.5

Authentication Bypass resulting in exposure of SD-WAN functionality in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10...

CVE-2019-113456.1

Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow XSS.