Citrix Update
2768Warning Date
Severity Level
Warning Number
Target Sector
17 November, 2020
● Critical
2020-2069
All
Description:
Citrix has released security update to address multiple vulnerabilities in the following versions of Citrix SD-WAN:
- Citrix SD-WAN 11.2
- before 11.2.2
- Citrix SD-WAN 11.1
- before 11.1.2b
- Citrix SD-WAN 10.2
- before 10.2.8
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Privilege escalation to root
- Authentication Bypass
- Remote code execution with root privileges
Best practice and Recommendations:
The CERT team encourages users to update the affected versions and to review Citrix security advisory: