Skip to main content

Government officials will never ask you to transfer money or disclose bank log-in details over a phone call.

Call the 24/7 ScamShield Helpline at 1799 if you are unsure if something is a scam.

Cyber Security Agency of Singapore
  1. Home
  2. Alerts & Advisories
  3. Alerts
  4. Multiple vulnerabilities in Citrix ADC, Citrix Gateway, and Citrix
Alerts

Multiple vulnerabilities in Citrix ADC, Citrix Gateway, and Citrix

18 September 2020

Citrix issued a security update to address multiple vulnerabilities in its Citrix Application Delivery Controller (ADC), Citrix Gateway, and Citrix SDWAN WANOP:

•    CVE-2020-8245 - A HTML injection attack against the Secure Sockets Layer (SSL) Virtual Private Network (VPN) web portal
•    CVE-2020-8246 - A denial of service attack originating from the management network
•    CVE-2020-8247 - Escalation of privileges on the management interface

Successful exploitation of these vulnerabilities could allow attackers to perform a HTML injection attack against the SSL VPN web portal, cause a denial of service attack originating from the management network, or escalate privileges on the management interface.

Citrix Administrators are strongly advised to patch your systems to the latest version immediately.

For more information, refer to:

https://support.citrix.com/article/CTX281474

Back to top