CVE-2020-6175 — Improper Certificate Validation in Citrix Sd-wan Center

CWE-295 — Improper Certificate Validation4 documents3 sources
Severity
5.9MEDIUMNVD
EPSS
0.1%
top 65.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Citrix Sd-wan CenterCitrix Netscaler Sd-wan CenterCitrix ADM+7 more
Timeline
PublishedMar 16
Latest updateMay 24

Description

Citrix SD-WAN 10.2.x before 10.2.6 and 11.0.x before 11.0.3 has Missing SSL Certificate Validation.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 2.2 | Impact: 3.6

Affected Packages10 packages

▶NVDcitrix/citrix_sd-wan_center10.2.0 — 10.2.6+2
▶citrixcitrix/sd-wan

🔴Vulnerability Details

1
GHSA
GHSA-w8xf-5mxg-f2r2: Citrix SD-WAN 10↗2022-05-24
▶

📋Vendor Advisories

2
Citrix
CVE-2020-6175: Citrix SD-WAN 10.2.x before 10.2.6 and 11.0.x before 11.0.3 has Missing SSL Certificate Validation.↗2020-03-16
▶
Citrix
Citrix Security Bulletin CTX263526↗
▶