6.5

CVE-2020-8299

Citrix ADC and Citrix/NetScaler Gateway 13.0 before 13.0-76.29, 12.1-61.18, 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238, and Citrix SD-WAN WANOP Edition before 11.4.0, 11.3.2, 11.3.1a, 11.2.3a, 11.1.2c, 10.2.9a suffers from uncontrolled resource consumption by way of a network-based denial-of-service from within the same Layer 2 network segment. Note that the attacker must be in the same Layer 2 network segment as the vulnerable appliance.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Citrix ≫ Gateway Version >= 12.1 < 12.1-61.18
Citrix ≫ Gateway Version >= 13.0 < 13.0-76.29
Citrix ≫ NetScaler Gateway Version >= 11.1 < 11.1-65.20
Citrix ≫ Application Delivery Controller Firmware Version >= 11.1 < 11.1-65.20
Citrix ≫ Application Delivery Controller Firmware Version >= 12.1 < 12.1-61.18
Citrix ≫ Application Delivery Controller Firmware Version >= 13.0 < 13.0-76.29
Citrix ≫ Application Delivery Controller Firmware Version >= 12.1 < 12.1-55.238
   Citrix ≫ Mpx/sdx 14030 Fips Version-
   Citrix ≫ Mpx/sdx 14060 Fips Version-
   Citrix ≫ Mpx/sdx 14080 Fips Version-
   Citrix ≫ Mpx 15030-50g Fips Version-
   Citrix ≫ Mpx 15040-50g Fips Version-
   Citrix ≫ Mpx 15060-50g Fips Version-
   Citrix ≫ Mpx 15080-50g Fips Version-
   Citrix ≫ Mpx 15100-50g Fips Version-
   Citrix ≫ Mpx 15120-50g Fips Version-
   Citrix ≫ Mpx 8905 Fips Version-
   Citrix ≫ Mpx 8910 Fips Version-
   Citrix ≫ Mpx 8920 Fips Version-
Citrix ≫ Sd-wan Wanop Version >= 10.2 < 10.2.9a
Citrix ≫ Sd-wan Wanop Version >= 11.1 < 11.1.2c
Citrix ≫ Sd-wan Wanop Version >= 11.2 < 11.2.3a
Citrix ≫ Sd-wan Wanop Version >= 11.3 < 11.3.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.45
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 3.3 6.5 2.9
AV:A/AC:L/Au:N/C:N/I:N/A:P
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.