CVE-2020-8247: High severity citrix netscaler application delivery controller firmware vulnerability

Q: What is the vulnerability ID for this Citrix ADC and Citrix Gateway vulnerability?

The vulnerability ID for this Citrix ADC and Citrix Gateway vulnerability is CVE-2020-8247.

Q: What is the severity of CVE-2020-8247?

CVE-2020-8247 has a severity rating of 8.8 (High).

Q: Which software versions are affected by CVE-2020-8247?

CVE-2020-8247 affects Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, and Citrix SD-WAN WANOP 11.0.3f.

Q: How can I fix the CVE-2020-8247 vulnerability?

To fix the CVE-2020-8247 vulnerability, it is recommended to upgrade to the patched Citrix ADC and Citrix Gateway versions: 13.0-64.35, 12.1-58.15, 12.1-55.187, or apply the necessary security updates provided by Citrix.

Q: Where can I find more information about CVE-2020-8247?

You can find more information about CVE-2020-8247 on the Citrix support website: https://support.citrix.com/article/CTX281474

Published Sep 18, 2020

Updated

Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, Citrix SD-WAN WANOP 11.1 before 11.1.2a, Citrix SD-WAN WANOP 11.0 before 11.0.3f, Citrix SD-WAN WANOP 10.2 before 10.2.7b are vulnerable to escalation of privileges on the management interface.

Affected Software

12 affected components

Citrix Application Delivery Controller Firmware>=11.1<11.1-65.12

Citrix Application Delivery Controller Firmware>=12.1<12.1-58.15

Citrix Application Delivery Controller Firmware>=13.0<13.0-64.35

Citrix Application Delivery Controller

Citrix Gateway>=11.1<11.1-65.12

Citrix Gateway>=13.0<13.0-64.35

Citrix NetScaler Gateway>=12.1<12.1-58.15

Citrix SD-WAN WANOP>=10.2<10.2.7b

Citrix SD-WAN WANOP>=11.0<11.0.3f

Citrix SD-WAN WANOP>=11.1<11.1.2a

Citrix SD-WAN WANOP>=11.2<11.2.1a

Citrix SD-WAN WANOP

Event History

Sep 18, 2020

CVE Published

via MITRE·08:12 PM

Data Sourced

via MITRE·08:12 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID for this Citrix ADC and Citrix Gateway vulnerability?

The vulnerability ID for this Citrix ADC and Citrix Gateway vulnerability is CVE-2020-8247.

What is the severity of CVE-2020-8247?

CVE-2020-8247 has a severity rating of 8.8 (High).

Which software versions are affected by CVE-2020-8247?

CVE-2020-8247 affects Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, and Citrix SD-WAN WANOP 11.0.3f.

How can I fix the CVE-2020-8247 vulnerability?

To fix the CVE-2020-8247 vulnerability, it is recommended to upgrade to the patched Citrix ADC and Citrix Gateway versions: 13.0-64.35, 12.1-58.15, 12.1-55.187, or apply the necessary security updates provided by Citrix.

Where can I find more information about CVE-2020-8247?