CVE-2021-22919
High
Description
A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO. These vulnerabilities, if exploited, could lead to the limited available disk space on the appliances being fully consumed.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Citrix Gateway
PublishedAug 5, 2021
First seenAug 5, 2021
Weakness typeCWE-770Allocation of resources without limits
How to fix
Update
- citrix gateway12.1-62.27, 13.0-82.45 or later
- citrix application_delivery_controller_firmware11.1-65.22, 12.1-62.27, 13.0-82.45, 12.1-55.238 or later
- citrix netscaler_gateway11.1-65.22 or later
- citrix sd-wan_wanop10.2.9.b, 11.2.3.b, 11.3.2.a, 11.4.0.a or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| citrix gateway | 12.1 ≤ v < 12.1-62.27, 13.0 ≤ v < 13.0-82.45 | 12.1-62.27, 13.0-82.45 |
| citrix application_delivery_controller_firmware | 11.1 ≤ v < 11.1-65.22, 12.1 ≤ v < 12.1-62.27, 13.0 ≤ v < 13.0-82.45, 12.1 ≤ v < 12.1-55.238 | 11.1-65.22, 12.1-62.27, 13.0-82.45, 12.1-55.238 |
| citrix netscaler_gateway | 11.1 ≤ v < 11.1-65.22 | 11.1-65.22 |
| citrix sd-wan_wanop | 10.2 ≤ v < 10.2.9.b, 11.2 ≤ v < 11.2.3.b, 11.3 ≤ v < 11.3.2.a, 11.4 ≤ v < 11.4.0.a | 10.2.9.b, 11.2.3.b, 11.3.2.a, 11.4.0.a |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.