⚠ Actively exploited in ransomware campaigns
This vulnerability is on the CISA Known Exploited Vulnerabilities list and has been used in known ransomware attacks. CISA required action: Apply updates per vendor instructions.. Due date: 2022-05-03.
CVE-2019-19781 — Path Traversal in Citrix Application Delivery Controller Firmware
Severity
9.8CRITICALNVD
EPSS
94.4%
top < 0.01%
CISA KEV
KEVRansomware
Added 2021-11-03
Due 2022-05-03
Exploit
Exploited in wild
Active exploitation observed
Affected products
Timeline
PublishedDec 27
KEV addedNov 3
KEV dueMay 3
Latest updateAug 26
CISA Required Action: Apply updates per vendor instructions.
Description
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9
Affected Packages10 packages
🔴Vulnerability Details
2💥Exploits & PoCs
7Exploit-DB
▶
Exploit-DB▶
Citrix Application Delivery Controller and Gateway 10.5 - Remote Code Execution (Metasploit)↗2020-01-13
Exploit-DB
▶
Exploit-DB
▶
🔍Detection Rules
6Suricata▶
ET EXPLOIT Citrix Application Delivery Controller Arbitrary Code Execution Attempt Scanner Attempt (CVE-2019-19781)↗2022-02-05
Suricata▶
ET EXPLOIT Citrix Application Delivery Controller Arbitrary Code Execution Attempt Scanner Attempt - Server Response (CVE-2019-19781)↗2022-02-05
Suricata▶
ET EXPLOIT Possible Citrix Application Delivery Controller Arbitrary Code Execution Attempt (CVE-2019-19781) M4↗2022-02-05
Suricata
▶
Suricata▶
ET EXPLOIT Possible Citrix Application Delivery Controller Arbitrary Code Execution Attempt (CVE-2019-19781) M2↗2020-01-13
📋Vendor Advisories
3Citrix▶
CVE-2019-19781: An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.↗2019-12-27