{"identifier":"CVE-2020-8193","cve":{"id":"CVE-2020-8193","description":"Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints.","published":"2020-07-10T16:15:12.157000+00:00","modified":"2026-06-17T03:26:01.560000+00:00","status":"Analyzed","score":6.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss_version":"3.1","affected":[{"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"10.5","versionStartExcluding":"","versionEndIncluding":"","versionEndExcluding":"10.5-70.18"},{"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1","versionStartExcluding":"","versionEndIncluding":"","versionEndExcluding":"11.1-64.14"},{"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.0","versionStartExcluding":"","versionEndIncluding":"","versionEndExcluding":"12.0-63.21"},{"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1","versionStartExcluding":"","versionEndIncluding":"","versionEndExcluding":"12.1-57.18"},{"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0","versionStartExcluding":"","versionEndIncluding":"","versionEndExcluding":"13.0-58.30"},{"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"10.5","versionStartExcluding":"","versionEndIncluding":"","versionEndExcluding":"10.5-70.18"},{"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1","versionStartExcluding":"","versionEndIncluding":"","versionEndExcluding":"11.1-64.14"},{"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.0","versionStartExcluding":"","versionEndIncluding":"","versionEndExcluding":"12.0-63.21"},{"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1","versionStartExcluding":"","versionEndIncluding":"","versionEndExcluding":"12.1-57.18"},{"criteria":"cpe:2.3:o:citrix:gateway_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0","versionStartExcluding":"","versionEndIncluding":"","versionEndExcluding":"13.0-58.30"},{"criteria":"cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2","versionStartExcluding":"","versionEndIncluding":"","versionEndExcluding":"10.2.7"},{"criteria":"cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:*","versionStartIncluding":"11.0","versionStartExcluding":"","versionEndIncluding":"","versionEndExcluding":"11.0.3d"},{"criteria":"cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1","versionStartExcluding":"","versionEndIncluding":"","versionEndExcluding":"11.1.1a"}],"weaknesses":["CWE-284","CWE-287"],"references":[{"url":"http://packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local-File-Inclusion.html","source":"support@hackerone.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX276688","source":"support@hackerone.com","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local-File-Inclusion.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://support.citrix.com/article/CTX276688","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8193","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}],"kev":{"cveID":"CVE-2020-8193","vendorProject":"Citrix","product":"Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance","vulnerabilityName":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability","dateAdded":"2021-11-03","shortDescription":"Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an authorization bypass vulnerability that may allow unauthenticated access to certain URL endpoints. The attacker must have access to the NetScaler IP (NSIP) in order to perform exploitation.","requiredAction":"Apply updates per vendor instructions.","dueDate":"2022-05-03","knownRansomwareCampaignUse":"Unknown","forensicTriage":"No","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-8193","cwes":["CWE-284"]},"kev_checked":true,"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-07T12:35:04.938931Z","id":"CVE-2020-8193","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"10.5","versionEndExcluding":"10.5-70.18","matchCriteriaId":"FC8327D0-8B64-44AF-A230-AAE32F3526CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1","versionEndExcluding":"11.1-64.14","matchCriteriaId":"D4807513-1157-4CE3-8998-9C5EB9BBDA3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.0","versionEndExcluding":"12.0-63.21","matchCriteriaId":"165076F2-014F-46F9-A1AB-2256D935A21B"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-57.18","matchCriteriaId":"D6AE49E6-A6B9-4E2B-9AFB-7F1808D052F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0","versionEndExcluding":"13.0-58.30","matchCriteriaId":"03868D24-B1C0-4245-AE28-0960CF2816C1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"10.5","versionEndExcluding":"10.5-70.18","matchCriteriaId":"BA7AAC01-A7CB-48F4-A25D-4A29479CD0DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1","versionEndExcluding":"11.1-64.14","matchCriteriaId":"61C33096-91FD-4387-8B90-C8981DB7F926"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.0","versionEndExcluding":"12.0-63.21","matchCriteriaId":"7605821F-21B0-4F9D-AAD1-F901CED00585"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-57.18","matchCriteriaId":"6FA8946F-75C2-4515-9EBE-E1884B35ECF1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:gateway_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0","versionEndExcluding":"13.0-58.30","matchCriteriaId":"E6D0CC10-FE91-40E4-BFFD-11BE41DD4269"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2","versionEndExcluding":"10.2.7","matchCriteriaId":"B7DF63BB-CCE6-4405-8E6D-6DF1BC975D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:*","versionStartIncluding":"11.0","versionEndExcluding":"11.0.3d","matchCriteriaId":"1D1A5E7D-C3A7-48B8-BD6D-5973F8361DEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1","versionEndExcluding":"11.1.1a","matchCriteriaId":"0471F1F0-F804-47BA-98A1-7080E1C740E7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:4000-wo:-:*:*:*:*:*:*:*","matchCriteriaId":"25C848BC-98F7-41D4-A262-8B7EB304F4C1"},{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:4100-wo:-:*:*:*:*:*:*:*","matchCriteriaId":"F3979EFF-AE6E-4274-97E2-58C7E01C920E"},{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:5000-wo:-:*:*:*:*:*:*:*","matchCriteriaId":"C87AF39E-6BCF-4188-BAB1-A5CBDEBF662E"},{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:5100-wo:-:*:*:*:*:*:*:*","matchCriteriaId":"38514675-1C15-460C-B34C-2633A8A36A78"}]}]}],"source":"nvd","retrieved_at":"2026-10-28T15:20:32.872741+00:00","exploited":true,"kev_stale":false,"products":["citrix / application delivery controller firmware","citrix / netscaler gateway firmware","citrix / gateway firmware","citrix / sd-wan wanop"],"priority":{"label":"Known exploitation: prioritize review","reasons":["CISA KEV lists real-world exploitation."]},"epss":{"probability":0.88269,"percentile":0.99768,"date":"2026-10-27","stale":false},"version_assessment":null},"news":[],"campaigns":[],"domains":[{"domain":"packetstormsecurity.com","source_url":"http://packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local-File-Inclusion.html","investigate_url":"https://investigate.aeglixmind.com/#packetstormsecurity.com"},{"domain":"support.citrix.com","source_url":"https://support.citrix.com/article/CTX276688","investigate_url":"https://investigate.aeglixmind.com/#support.citrix.com"},{"domain":"www.cisa.gov","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8193","investigate_url":"https://investigate.aeglixmind.com/#www.cisa.gov"}],"arsenal_url":"https://arsenal.aeglixmind.com/?cve=CVE-2020-8193","catalog_url":"https://cves.aeglixmind.com/cve/CVE-2020-8193","research_url":"https://investigate.aeglixmind.com/research/cve/CVE-2020-8193","coverage":{"news_candidates_checked":0,"campaign_candidates_checked":0,"bounded":false,"notice":"Exact CVE mentions in stored public excerpts and reviewed campaign content only. A mention is not proof of exploitation, attribution or tool suitability. Missing matches do not establish absence."}}