CVE-2018-17448: Critical severity citrix sd-wan vulnerability

Q: What is CVE-2018-17448?

CVE-2018-17448 is an Incorrect Access Control issue discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.

Q: What is the severity of CVE-2018-17448?

CVE-2018-17448 has a severity rating of 9.8 (Critical).

Q: How do I fix CVE-2018-17448?

To fix CVE-2018-17448, update Citrix SD-WAN to version 10.1.0 or higher, and update NetScaler SD-WAN to version 9.3.6 or higher.

Q: Where can I find more information about CVE-2018-17448?

More information about CVE-2018-17448 can be found at the following references: [SecurityFocus](http://www.securityfocus.com/bid/105711), [Citrix Support](https://support.citrix.com/article/CTX236992).

Published Oct 23, 2018

Updated

An Incorrect Access Control issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.

Affected Software

3 affected components

Citrix NetScaler SD-WAN>=9.3.0<=9.3.6

Citrix NetScaler SD-WAN>=10.0.0<=10.0.4

Citrix SD-WAN=10.1.0

Event History

Oct 23, 2018

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is CVE-2018-17448?

CVE-2018-17448 is an Incorrect Access Control issue discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.

Which software versions are affected by CVE-2018-17448?

Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4 are affected by CVE-2018-17448.

What is the severity of CVE-2018-17448?

CVE-2018-17448 has a severity rating of 9.8 (Critical).

How do I fix CVE-2018-17448?

To fix CVE-2018-17448, update Citrix SD-WAN to version 10.1.0 or higher, and update NetScaler SD-WAN to version 9.3.6 or higher.

Where can I find more information about CVE-2018-17448?