Lucene search

HackeroneCVE-2021-22919

HistoryAug 05, 2021 - 9:15 p.m.

CVE-2021-22919

2021-08-0521:15:10

CWE-770

hackerone

web.nvd.nist.gov

citrix

adc

gateway

vulnerability

cve-2021-22919

disk space

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

42.5%

JSON

A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO. These vulnerabilities, if exploited, could lead to the limited available disk space on the appliances being fully consumed.

Affected configurations

Nvd

Node

citrixapplication_delivery_controller_firmwareRange11.1–11.1-65.22

citrixapplication_delivery_controller_firmwareRange12.1–12.1-62.27

citrixapplication_delivery_controller_firmwareRange13.0–13.0-82.45

AND

citrixapplication_delivery_controllerMatch-

Node

citrixapplication_delivery_controller_firmwareRange12.1–12.1-55.238

AND

citrixmpx\/sdx_14030_fipsMatch-

citrixmpx\/sdx_14060_fipsMatch-

citrixmpx\/sdx_14080_fipsMatch-

citrixmpx_15030-50g_fipsMatch-

citrixmpx_15040-50g_fipsMatch-

citrixmpx_15060-50g_fipsMatch-

citrixmpx_15080-50g_fipsMatch-

citrixmpx_15100-50g_fipsMatch-

citrixmpx_15120-50g_fipsMatch-

citrixmpx_8905_fipsMatch-

citrixmpx_8910_fipsMatch-

citrixmpx_8920_fipsMatch-

Node

citrixgatewayRange12.1–12.1-62.27

citrixgatewayRange13.0–13.0-82.45

citrixnetscaler_gatewayRange11.1–11.1-65.22

Node

citrixsd-wan_wanopRange10.2–10.2.9.b

citrixsd-wan_wanopRange11.2–11.2.3.b

citrixsd-wan_wanopRange11.3–11.3.2.a

citrixsd-wan_wanopRange11.4–11.4.0.a

AND

citrix4000-woMatch-

citrix4100-woMatch-

citrix5000-woMatch-

citrix5100-woMatch-

VendorProductVersionCPE
citrixapplication_delivery_controller_firmware*cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*
citrixapplication_delivery_controller-cpe:2.3:h:citrix:application_delivery_controller:-:*:*:*:*:*:*:*
citrixmpx\/sdx_14030_fips-cpe:2.3:h:citrix:mpx\/sdx_14030_fips:-:*:*:*:*:*:*:*
citrixmpx\/sdx_14060_fips-cpe:2.3:h:citrix:mpx\/sdx_14060_fips:-:*:*:*:*:*:*:*
citrixmpx\/sdx_14080_fips-cpe:2.3:h:citrix:mpx\/sdx_14080_fips:-:*:*:*:*:*:*:*
citrixmpx_15030-50g_fips-cpe:2.3:h:citrix:mpx_15030-50g_fips:-:*:*:*:*:*:*:*
citrixmpx_15040-50g_fips-cpe:2.3:h:citrix:mpx_15040-50g_fips:-:*:*:*:*:*:*:*
citrixmpx_15060-50g_fips-cpe:2.3:h:citrix:mpx_15060-50g_fips:-:*:*:*:*:*:*:*
citrixmpx_15080-50g_fips-cpe:2.3:h:citrix:mpx_15080-50g_fips:-:*:*:*:*:*:*:*
citrixmpx_15100-50g_fips-cpe:2.3:h:citrix:mpx_15100-50g_fips:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
citrix	application_delivery_controller_firmware	*	cpe:2.3:o:citrix:application_delivery_controller_firmware::::::::
citrix	application_delivery_controller	-	cpe:2.3:h:citrix:application_delivery_controller:-:::::::*
citrix	mpx\/sdx_14030_fips	-	cpe:2.3:h:citrix:mpx\/sdx_14030_fips:-:::::::*
citrix	mpx\/sdx_14060_fips	-	cpe:2.3:h:citrix:mpx\/sdx_14060_fips:-:::::::*
citrix	mpx\/sdx_14080_fips	-	cpe:2.3:h:citrix:mpx\/sdx_14080_fips:-:::::::*
citrix	mpx_15030-50g_fips	-	cpe:2.3:h:citrix:mpx_15030-50g_fips:-:::::::*
citrix	mpx_15040-50g_fips	-	cpe:2.3:h:citrix:mpx_15040-50g_fips:-:::::::*
citrix	mpx_15060-50g_fips	-	cpe:2.3:h:citrix:mpx_15060-50g_fips:-:::::::*
citrix	mpx_15080-50g_fips	-	cpe:2.3:h:citrix:mpx_15080-50g_fips:-:::::::*
citrix	mpx_15100-50g_fips	-	cpe:2.3:h:citrix:mpx_15100-50g_fips:-:::::::*

Rows per page:

1-10 of 211

CNA Affected

[
  {
    "product": "Citrix ADC, Citrix Gateway, Citrix SD-WAN WANOP",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Citrix ADC and Citrix Gateway 13.0-82.45 and later releases of 13.0 Citrix ADC and Citrix Gateway 12.1-62.27 and later releases of 12.1 Citrix ADC and NetScaler Gateway 11.1-65.22 and later releases of 11.1 Citrix ADC 12.1-FIPS 12.1-55.247 and later releases of 12.1-FIPS Citrix SD-WAN WANOP Edition 11.4.0a and later releases of 11.4 Citrix SD-WAN WANOP Edition 11.3.2a and later releases of 11.3 Citrix SD-WAN WANOP Edition 11.2.3b and later releases of 11.2 Citrix SD-WAN WANOP Edition 10.2.9b and later releases of 10.2"
      }
    ]
  }
]

References

support.citrix.com/article/CTX319135

Social References

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

42.5%

JSON

Related for CVE-2021-22919