CVE-2019-19781

Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability

Severity Score

9.8

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

Yes

*KEV

Decision

*SSVC

Descriptions

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.

Se descubrió un problema en Citrix Application Delivery Controller (ADC) and Gateway versiones 10.5, 11.1, 12.0, 12.1 y 13.0. Permiten un salto de directorio.

Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an unspecified vulnerability that could allow an unauthenticated attacker to perform code execution.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2019-12-13 CVE Reserved
2019-12-17 First Exploit
2019-12-27 CVE Published
2021-11-03 Exploited in Wild
2022-05-03 KEV Due Date
2024-08-05 CVE Updated
2024-09-12 EPSS Updated

CWE

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CAPEC

References (44)

URL	Tag	Source
http://packetstormsecurity.com/files/155904/Citrix-Application-Delivery-Controller-Gateway-Remote-Code-Execution.html	Third Party Advisory
http://packetstormsecurity.com/files/155905/Citrix-Application-Delivery-Controller-Gateway-Remote-Code-Execution-Traversal.html	Third Party Advisory
http://packetstormsecurity.com/files/155930/Citrix-Application-Delivery-Controller-Gateway-10.5-Remote-Code-Execution.html	Third Party Advisory
http://packetstormsecurity.com/files/155947/Citrix-ADC-NetScaler-Directory-Traversal-Remote-Code-Execution.html	Third Party Advisory
http://packetstormsecurity.com/files/155972/Citrix-ADC-Gateway-Path-Traversal.html	Third Party Advisory
https://badpackets.net/over-25000-citrix-netscaler-endpoints-vulnerable-to-cve-2019-19781	Broken Link
https://forms.gle/eDf3DXZAv96oosfj6	Third Party Advisory
https://twitter.com/bad_packets/status/1215431625766424576	Broken Link
https://www.kb.cert.org/vuls/id/619785	Third Party Advisory
https://www.mdsec.co.uk/2020/01/deep-dive-to-citrix-adc-remote-code-execution-cve-2019-19781
https://swarm.ptsecurity.com/remote-code-execution-in-citrix-adc

URL	Date	SRC
https://www.exploit-db.com/exploits/47930	2020-01-16
https://www.exploit-db.com/exploits/47913	2020-01-13
https://www.exploit-db.com/exploits/47901	2020-01-11
https://github.com/projectzeroindia/CVE-2019-19781	2020-01-17
https://github.com/mpgn/CVE-2019-19781	2020-08-28
https://github.com/jas502n/CVE-2019-19781	2020-01-11
https://github.com/mandiant/ioc-scanner-CVE-2019-19781	2020-03-25
https://github.com/citrix/ioc-scanner-CVE-2019-19781	2020-03-25
https://github.com/haxrob/CVE-2019-19781	2020-02-05
https://github.com/aqhmal/CVE-2019-19781	2020-01-14
https://github.com/w4fz5uck5/CVE-2019-19781-CitrixRCE	2023-09-12
https://github.com/onSec-fr/CVE-2019-19781-Forensic	2020-02-18
https://github.com/VladRico/CVE-2019-19781	2023-08-21
https://github.com/ianxtianxt/CVE-2019-19781	2020-01-11
https://github.com/pwn3z/CVE-2019-19781-Citrix	2021-04-06
https://github.com/Vulnmachines/Ctirix_RCE-CVE-2019-19781	2022-07-26
https://github.com/k-fire/CVE-2019-19781-exploit	2021-11-07
https://github.com/oways/CVE-2019-19781	2020-01-11
https://github.com/r4ulcl/CVE-2019-19781	2020-01-28
https://github.com/yukar1z0e/CVE-2019-19781	2020-05-26
https://github.com/hollerith/CVE-2019-19781	2020-01-13
https://github.com/SharpHack/CVE-2019-19781	2020-01-11
https://github.com/zerobytesecure/CVE-2019-19781	2024-06-25
https://github.com/b510/CVE-2019-19781	2020-01-17
https://github.com/redscan/CVE-2019-19781	2020-01-17
https://github.com/andripwn/CVE-2019-19781	2020-07-27
https://github.com/Castaldio86/Detect-CVE-2019-19781	2020-01-16
https://github.com/qiong-qi/CVE-2019-19781-poc	2020-07-09
https://github.com/zgelici/CVE-2019-19781-Checker	2020-01-15
https://github.com/jamesjguthrie/Shitrix-CVE-2019-19781	2020-07-21
https://github.com/Azeemering/CVE-2019-19781-DFIR-Notes	2023-05-09
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/freebsd/http/citrix_dir_traversal_rce.rb	2019-12-17

URL	Date	SRC

URL	Date	SRC
https://support.citrix.com/article/CTX267027	2019-12-17

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Citrix Search vendor "Citrix"	Application Delivery Controller Firmware Search vendor "Citrix" for product "Application Delivery Controller Firmware"	10.5 Search vendor "Citrix" for product "Application Delivery Controller Firmware" and version "10.5"	-	Affected	in	Citrix Search vendor "Citrix"	Application Delivery Controller Search vendor "Citrix" for product "Application Delivery Controller"	-	-	Safe
Citrix Search vendor "Citrix"	Application Delivery Controller Firmware Search vendor "Citrix" for product "Application Delivery Controller Firmware"	11.1 Search vendor "Citrix" for product "Application Delivery Controller Firmware" and version "11.1"	-	Affected	in	Citrix Search vendor "Citrix"	Application Delivery Controller Search vendor "Citrix" for product "Application Delivery Controller"	-	-	Safe
Citrix Search vendor "Citrix"	Application Delivery Controller Firmware Search vendor "Citrix" for product "Application Delivery Controller Firmware"	12.0 Search vendor "Citrix" for product "Application Delivery Controller Firmware" and version "12.0"	-	Affected	in	Citrix Search vendor "Citrix"	Application Delivery Controller Search vendor "Citrix" for product "Application Delivery Controller"	-	-	Safe
Citrix Search vendor "Citrix"	Application Delivery Controller Firmware Search vendor "Citrix" for product "Application Delivery Controller Firmware"	12.1 Search vendor "Citrix" for product "Application Delivery Controller Firmware" and version "12.1"	-	Affected	in	Citrix Search vendor "Citrix"	Application Delivery Controller Search vendor "Citrix" for product "Application Delivery Controller"	-	-	Safe
Citrix Search vendor "Citrix"	Application Delivery Controller Firmware Search vendor "Citrix" for product "Application Delivery Controller Firmware"	13.0 Search vendor "Citrix" for product "Application Delivery Controller Firmware" and version "13.0"	-	Affected	in	Citrix Search vendor "Citrix"	Application Delivery Controller Search vendor "Citrix" for product "Application Delivery Controller"	-	-	Safe
Citrix Search vendor "Citrix"	Netscaler Gateway Firmware Search vendor "Citrix" for product "Netscaler Gateway Firmware"	10.5 Search vendor "Citrix" for product "Netscaler Gateway Firmware" and version "10.5"	-	Affected	in	Citrix Search vendor "Citrix"	Netscaler Gateway Search vendor "Citrix" for product "Netscaler Gateway"	-	-	Safe
Citrix Search vendor "Citrix"	Netscaler Gateway Firmware Search vendor "Citrix" for product "Netscaler Gateway Firmware"	11.1 Search vendor "Citrix" for product "Netscaler Gateway Firmware" and version "11.1"	-	Affected	in	Citrix Search vendor "Citrix"	Netscaler Gateway Search vendor "Citrix" for product "Netscaler Gateway"	-	-	Safe
Citrix Search vendor "Citrix"	Netscaler Gateway Firmware Search vendor "Citrix" for product "Netscaler Gateway Firmware"	12.0 Search vendor "Citrix" for product "Netscaler Gateway Firmware" and version "12.0"	-	Affected	in	Citrix Search vendor "Citrix"	Netscaler Gateway Search vendor "Citrix" for product "Netscaler Gateway"	-	-	Safe
Citrix Search vendor "Citrix"	Netscaler Gateway Firmware Search vendor "Citrix" for product "Netscaler Gateway Firmware"	12.1 Search vendor "Citrix" for product "Netscaler Gateway Firmware" and version "12.1"	-	Affected	in	Citrix Search vendor "Citrix"	Netscaler Gateway Search vendor "Citrix" for product "Netscaler Gateway"	-	-	Safe
Citrix Search vendor "Citrix"	Gateway Firmware Search vendor "Citrix" for product "Gateway Firmware"	13.0 Search vendor "Citrix" for product "Gateway Firmware" and version "13.0"	-	Affected	in	Citrix Search vendor "Citrix"	Gateway Search vendor "Citrix" for product "Gateway"	-	-	Safe