CVE-2024-2049

Server-Side Request Forgery (SSRF)

Published Mar 12, 2024 CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Description
Server-Side Request Forgery (SSRF) in Citrix SD-WAN Standard/Premium Editions on or after 11.4.0 and before 11.4.4.46 allows an attacker to disclose limited information from the appliance via Access to management IP.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2024-27014 Server-Side Request Forgery (SSRF) in Citrix SD-WAN Standard/Premium Editions on or after 11.4.0 and before 11.4.4.46 allows an attacker to disclose limited information from the appliance via Access to management IP.
History
Type Values Removed Values Added
First Time appeared Citrix sd-wan 1000
Citrix sd-wan 1000 Firmware
Citrix sd-wan 110
Citrix sd-wan 1100
Citrix sd-wan 1100 Firmware
Citrix sd-wan 110 Firmware
Citrix sd-wan 2000
Citrix sd-wan 2000 Firmware
Citrix sd-wan 210
Citrix sd-wan 2100
Citrix sd-wan 2100 Firmware
Citrix sd-wan 210 Firmware
Citrix sd-wan 400
Citrix sd-wan 4000
Citrix sd-wan 4000 Firmware
Citrix sd-wan 400 Firmware
Citrix sd-wan 410
Citrix sd-wan 4100
Citrix sd-wan 4100 Firmware
Citrix sd-wan 410 Firmware
Citrix sd-wan 5100
Citrix sd-wan 5100 Firmware
Citrix sd-wan 6100
Citrix sd-wan 6100 Firmware
CPEs cpe:2.3:h:citrix:sd-wan_1000:-:*:*:*:premium:*:*:*
cpe:2.3:h:citrix:sd-wan_1000:-:*:*:*:standard:*:*:*
cpe:2.3:h:citrix:sd-wan_1100:-:*:*:*:premium:*:*:*
cpe:2.3:h:citrix:sd-wan_1100:-:*:*:*:standard:*:*:*
cpe:2.3:h:citrix:sd-wan_110:-:*:*:*:standard:*:*:*
cpe:2.3:h:citrix:sd-wan_2000:-:*:*:*:premium:*:*:*
cpe:2.3:h:citrix:sd-wan_2000:-:*:*:*:standard:*:*:*
cpe:2.3:h:citrix:sd-wan_2100:-:*:*:*:premium:*:*:*
cpe:2.3:h:citrix:sd-wan_2100:-:*:*:*:standard:*:*:*
cpe:2.3:h:citrix:sd-wan_210:-:*:*:*:standard:*:*:*
cpe:2.3:h:citrix:sd-wan_4000:-:*:*:*:standard:*:*:*
cpe:2.3:h:citrix:sd-wan_400:-:*:*:*:standard:*:*:*
cpe:2.3:h:citrix:sd-wan_4100:-:*:*:*:standard:*:*:*
cpe:2.3:h:citrix:sd-wan_410:-:*:*:*:standard:*:*:*
cpe:2.3:h:citrix:sd-wan_5100:-:*:*:*:premium:*:*:*
cpe:2.3:h:citrix:sd-wan_5100:-:*:*:*:standard:*:*:*
cpe:2.3:h:citrix:sd-wan_6100:-:*:*:*:premium:*:*:*
cpe:2.3:h:citrix:sd-wan_6100:-:*:*:*:standard:*:*:*
cpe:2.3:o:citrix:sd-wan_1000_firmware:*:*:*:*:premium:*:*:*
cpe:2.3:o:citrix:sd-wan_1000_firmware:*:*:*:*:standard:*:*:*
cpe:2.3:o:citrix:sd-wan_1100_firmware:*:*:*:*:premium:*:*:*
cpe:2.3:o:citrix:sd-wan_1100_firmware:*:*:*:*:standard:*:*:*
cpe:2.3:o:citrix:sd-wan_110_firmware:*:*:*:*:standard:*:*:*
cpe:2.3:o:citrix:sd-wan_2000_firmware:*:*:*:*:premium:*:*:*
cpe:2.3:o:citrix:sd-wan_2000_firmware:*:*:*:*:standard:*:*:*
cpe:2.3:o:citrix:sd-wan_2100_firmware:*:*:*:*:premium:*:*:*
cpe:2.3:o:citrix:sd-wan_2100_firmware:*:*:*:*:standard:*:*:*
cpe:2.3:o:citrix:sd-wan_210_firmware:*:*:*:*:standard:*:*:*
cpe:2.3:o:citrix:sd-wan_4000_firmware:*:*:*:*:standard:*:*:*
cpe:2.3:o:citrix:sd-wan_400_firmware:*:*:*:*:standard:*:*:*
cpe:2.3:o:citrix:sd-wan_4100_firmware:*:*:*:*:standard:*:*:*
cpe:2.3:o:citrix:sd-wan_410_firmware:*:*:*:*:standard:*:*:*
cpe:2.3:o:citrix:sd-wan_5100_firmware:*:*:*:*:premium:*:*:*
cpe:2.3:o:citrix:sd-wan_5100_firmware:*:*:*:*:standard:*:*:*
cpe:2.3:o:citrix:sd-wan_6100_firmware:*:*:*:*:premium:*:*:*
cpe:2.3:o:citrix:sd-wan_6100_firmware:*:*:*:*:standard:*:*:*
Vendors & Products Citrix sd-wan 1000
Citrix sd-wan 1000 Firmware
Citrix sd-wan 110
Citrix sd-wan 1100
Citrix sd-wan 1100 Firmware
Citrix sd-wan 110 Firmware
Citrix sd-wan 2000
Citrix sd-wan 2000 Firmware
Citrix sd-wan 210
Citrix sd-wan 2100
Citrix sd-wan 2100 Firmware
Citrix sd-wan 210 Firmware
Citrix sd-wan 400
Citrix sd-wan 4000
Citrix sd-wan 4000 Firmware
Citrix sd-wan 400 Firmware
Citrix sd-wan 410
Citrix sd-wan 4100
Citrix sd-wan 4100 Firmware
Citrix sd-wan 410 Firmware
Citrix sd-wan 5100
Citrix sd-wan 5100 Firmware
Citrix sd-wan 6100
Citrix sd-wan 6100 Firmware
References
Type Values Removed Values Added
First Time appeared Citrix
Citrix citrix Sd Wan Premium Edition
Citrix citrix Sd Wan Standard Edition
CPEs cpe:2.3:a:citrix:citrix_sd_wan_premium_edition:*:*:*:*:*:*:*:*
cpe:2.3:a:citrix:citrix_sd_wan_standard_edition:*:*:*:*:*:*:*:*
Vendors & Products Citrix
Citrix citrix Sd Wan Premium Edition
Citrix citrix Sd Wan Standard Edition
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}