First published: Thu Aug 05 2021(Updated: )
A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO. These vulnerabilities, if exploited, could lead to the limited available disk space on the appliances being fully consumed.
Credit: support@hackerone.com
Affected Software | Affected Version | How to fix |
---|---|---|
Citrix Netscaler Application Delivery Controller Firmware | >=11.1<11.1-65.22 | |
Citrix Netscaler Application Delivery Controller Firmware | >=12.1<12.1-62.27 | |
Citrix Netscaler Application Delivery Controller Firmware | >=13.0<13.0-82.45 | |
Citrix Application Delivery Controller (ADC) and Gateway | ||
Citrix Netscaler Application Delivery Controller Firmware | >=12.1<12.1-55.238 | |
Citrix MPX/SDX 14030 FIPS | ||
Citrix MPX/SDX 14060 FIPS | ||
Citrix MPX/SDX 14080 FIPS | ||
Citrix MPX 15030-50G FIPS | ||
Citrix Mpx 15040-50g Fips | ||
Citrix MPX 15060-50G FIPS | ||
Citrix Mpx 15080-50g Fips | ||
Citrix Mpx 15100-50g Fips | ||
Citrix MPX | ||
Citrix Mpx 8905 Fips | ||
Citrix Mpx 8910 Fips | ||
Citrix MPX 8920 FIPS | ||
Citrix NetScaler Gateway | >=12.1<12.1-62.27 | |
Citrix NetScaler Gateway | >=13.0<13.0-82.45 | |
Citrix Netscaler Gateway Firmware | >=11.1<11.1-65.22 | |
Citrix SD-WAN WANOP | >=10.2<10.2.9.b | |
Citrix SD-WAN WANOP | >=11.2<11.2.3.b | |
Citrix SD-WAN WANOP | >=11.3<11.3.2.a | |
Citrix SD-WAN WANOP | >=11.4<11.4.0.a | |
Citrix 4000-wo | ||
Citrix 4100-wo | ||
Citrix 5000-wo | ||
Citrix SD-WAN 5100 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID of this Citrix ADC vulnerability is CVE-2021-22919.
The severity level of CVE-2021-22919 is high.
CVE-2021-22919 affects Citrix ADC (formerly known as NetScaler ADC), Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO.
If exploited, CVE-2021-22919 could lead to the limited available disk space on the affected systems.
More information about CVE-2021-22919 and how to fix it can be found in the official Citrix support article: https://support.citrix.com/article/CTX319135.