EDB-47112

functional

Citrix SD-WAN Appliance 10.2.2 - Authentication Bypass / Remote Command Execution

view exploit source exploit_dbverifiedtype webappsauthor Chris Lynepublished 2019-07-12catalog exploit_db

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2019-12991US	high8.8OT critical	74.5% (99th)	KEV	2019-07-16
Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 5 of 6).
CVE-2019-12989US	critical9.8OT critical	95.0% (100th)	KEV	2019-07-16
Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.