Actively exploited in the wild
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability
Citrix - Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2019-19781
CriticalCVSS 9.8KEVExploitation Probability (EPSS)
Very high risk100th percentile - higher than 100% of all known CVEs
Summary
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.
Risk Assessment
An attacker can gain unauthorized access to files and directories on the device, potentially leading to disclosure of sensitive information or further system compromise.
Recommendation
Apply available patches from Citrix or temporary mitigations recommended by the vendor.
Original NVD description (English source)
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.