5.3

CVE-2024-2049

Server-Side Request Forgery (SSRF)

Server-Side Request Forgery (SSRF) in Citrix SD-WAN Standard/Premium Editions on or after 11.4.0 and before 11.4.4.46 allows an attacker to disclose limited information from the appliance via Access to management IP.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Citrix ≫ Sd-wan 1000 Firmware SwEdition standard Version >= 11.4.0 < 11.4.4.46
   Citrix ≫ Sd-wan 1000 Version - SwEdition standard
Citrix ≫ Sd-wan 110 Firmware SwEdition standard Version >= 11.4.0 < 11.4.4.46
   Citrix ≫ Sd-wan 110 Version - SwEdition standard
Citrix ≫ Sd-wan 1100 Firmware SwEdition standard Version >= 11.4.0 < 11.4.4.46
   Citrix ≫ Sd-wan 1100 Version - SwEdition standard
Citrix ≫ Sd-wan 2000 Firmware SwEdition standard Version >= 11.4.0 < 11.4.4.46
   Citrix ≫ Sd-wan 2000 Version - SwEdition standard
Citrix ≫ Sd-wan 210 Firmware SwEdition standard Version >= 11.4.0 < 11.4.4.46
   Citrix ≫ Sd-wan 210 Version - SwEdition standard
Citrix ≫ Sd-wan 2100 Firmware SwEdition standard Version >= 11.4.0 < 11.4.4.46
   Citrix ≫ Sd-wan 2100 Version - SwEdition standard
Citrix ≫ Sd-wan 400 Firmware SwEdition standard Version >= 11.4.0 < 11.4.4.46
   Citrix ≫ Sd-wan 400 Version - SwEdition standard
Citrix ≫ Sd-wan 4000 Firmware SwEdition standard Version >= 11.4.0 < 11.4.4.46
   Citrix ≫ Sd-wan 4000 Version - SwEdition standard
Citrix ≫ Sd-wan 410 Firmware SwEdition standard Version >= 11.4.0 < 11.4.4.46
   Citrix ≫ Sd-wan 410 Version - SwEdition standard
Citrix ≫ Sd-wan 4100 Firmware SwEdition standard Version >= 11.4.0 < 11.4.4.46
   Citrix ≫ Sd-wan 4100 Version - SwEdition standard
Citrix ≫ Sd-wan 5100 Firmware SwEdition standard Version >= 11.4.0 < 11.4.4.46
   Citrix ≫ Sd-wan 5100 Version - SwEdition standard
Citrix ≫ Sd-wan 6100 Firmware SwEdition standard Version >= 11.4.0 < 11.4.4.46
   Citrix ≫ Sd-wan 6100 Version - SwEdition standard
Citrix ≫ Sd-wan 1000 Firmware SwEdition premium Version >= 11.4.0 < 11.4.4.46
   Citrix ≫ Sd-wan 1000 Version - SwEdition premium
Citrix ≫ Sd-wan 1100 Firmware SwEdition premium Version >= 11.4.0 < 11.4.4.46
   Citrix ≫ Sd-wan 1100 Version - SwEdition premium
Citrix ≫ Sd-wan 2000 Firmware SwEdition premium Version >= 11.4.0 < 11.4.4.46
   Citrix ≫ Sd-wan 2000 Version - SwEdition premium
Citrix ≫ Sd-wan 2100 Firmware SwEdition premium Version >= 11.4.0 < 11.4.4.46
   Citrix ≫ Sd-wan 2100 Version - SwEdition premium
Citrix ≫ Sd-wan 6100 Firmware SwEdition premium Version >= 11.4.0 < 11.4.4.46
   Citrix ≫ Sd-wan 6100 Version - SwEdition premium
Citrix ≫ Sd-wan 5100 Firmware SwEdition premium Version >= 11.4.0 < 11.4.4.46
   Citrix ≫ Sd-wan 5100 Version - SwEdition premium
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.37% 0.284
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
secure@citrix.com 6.5 3.9 2.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CWE-918 Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

https://support.citrix.com/article/CTX617071/citrix-sdwan-security-bulletin-for-cve20242049
Broken Link
https://support.citrix.com/external/article?articleUrl=CTX617071-citrix-sdwan-security-bulletin-for-cve20242049&language=en_US
Vendor Advisory