CVE-2020-8194: Code Injection

Q: What is CVE-2020-8194?

CVE-2020-8194 is a vulnerability that allows the modification of a file download in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14, and 10.5-70.18, as well as Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d, and 10.2.7.

Q: What is the severity of CVE-2020-8194?

The severity of CVE-2020-8194 is medium with a CVSS score of 6.5.

Q: How does CVE-2020-8194 work?

CVE-2020-8194 allows an attacker to perform reflected code injection, which can be used to modify a file download.

Q: Is there a fix for CVE-2020-8194?

Yes, Citrix has released patches to address the vulnerability. It is recommended to apply the latest updates to the affected software versions.

Published Jul 10, 2020

Updated

Reflected code injection in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows the modification of a file download.

Affected Software

20 affected components

Citrix Application Delivery Controller Firmware>=10.5<10.5-70.18

Citrix Application Delivery Controller Firmware>=11.1<11.1-64.14

Citrix Application Delivery Controller Firmware>=12.0<12.0-63.21

Citrix Application Delivery Controller Firmware>=12.1<12.1-57.18

Citrix Application Delivery Controller Firmware>=13.0<13.0-58.30

Citrix Application Delivery Controller

Citrix Netscaler Gateway Firmware>=10.5<10.5-70.18

Citrix Netscaler Gateway Firmware>=11.1<11.1-64.14

Citrix Netscaler Gateway Firmware>=12.0<12.0-63.21

Citrix Netscaler Gateway Firmware>=12.1<12.1-57.18

Citrix NetScaler Gateway

Citrix Gateway Firmware>=13.0<13.0-58.30

Citrix Gateway

Citrix SD-WAN WANOP>=10.2<10.2.7

Citrix SD-WAN WANOP>=11.0<11.0.3d

Citrix SD-WAN WANOP>=11.1<11.1.1a

Citrix 4000-WO

Citrix 4100-WO

Citrix 5000-WO

Citrix 5100-WO

Event History

Jul 10, 2020

CVE Published

via MITRE·03:38 PM

Data Sourced

via MITRE·03:38 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2020-8194?

CVE-2020-8194 is a vulnerability that allows the modification of a file download in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14, and 10.5-70.18, as well as Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d, and 10.2.7.

What is the severity of CVE-2020-8194?

The severity of CVE-2020-8194 is medium with a CVSS score of 6.5.

Which software versions are affected by CVE-2020-8194?

Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14, and 10.5-70.18, as well as Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d, and 10.2.7 are affected by CVE-2020-8194.

How does CVE-2020-8194 work?

CVE-2020-8194 allows an attacker to perform reflected code injection, which can be used to modify a file download.

Is there a fix for CVE-2020-8194?