1. Home
  2. CVE Database
  3. CVE-2020-8299
MEDIUM · 6.5

CVE-2020-8299

Citrix ADC and Citrix/NetScaler Gateway 13.0 before 13.0-76.29, 12.1-61.18, 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238, and Citrix SD-WAN WANOP Edition before 11.4.0, 11.3.2, 11.3.1a, 11.2.3a...

Vulnerability Description

Citrix ADC and Citrix/NetScaler Gateway 13.0 before 13.0-76.29, 12.1-61.18, 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238, and Citrix SD-WAN WANOP Edition before 11.4.0, 11.3.2, 11.3.1a, 11.2.3a, 11.1.2c, 10.2.9a suffers from uncontrolled resource consumption by way of a network-based denial-of-service from within the same Layer 2 network segment. Note that the attacker must be in the same Layer 2 network segment as the vulnerable appliance.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
CitrixGateway>= 12.1, < 12.1-61.18
CitrixNetscaler Gateway>= 11.1, < 11.1-65.20
CitrixApplication Delivery Controller Firmware>= 11.1, < 11.1-65.20
CitrixApplication Delivery Controller-
CitrixMpx\/Sdx 14030 Fips-
CitrixMpx\/Sdx 14060 Fips-
CitrixMpx\/Sdx 14080 Fips-
CitrixMpx 15030-50G Fips-
CitrixMpx 15040-50G Fips-
CitrixMpx 15060-50G Fips-
CitrixMpx 15080-50G Fips-
CitrixMpx 15100-50G Fips-
CitrixMpx 15120-50G Fips-
CitrixMpx 8905 Fips-
CitrixMpx 8910 Fips-
CitrixMpx 8920 Fips-
CitrixSd-Wan Wanop>= 10.2, < 10.2.9a

Related Weaknesses (CWE)

CWE-400

References

FAQ

What is CVE-2020-8299?

CVE-2020-8299 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Citrix ADC and Citrix/NetScaler Gateway 13.0 before 13.0-76.29, 12.1-61.18, 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238, and Citrix SD-WAN WANOP Edition before 11.4.0, 11.3.2, 11.3.1a, 11.2.3a...

How severe is CVE-2020-8299?

CVE-2020-8299 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-8299?

Check the references section above for vendor advisories and patch information. Affected products include: Citrix Gateway, Citrix Netscaler Gateway, Citrix Application Delivery Controller Firmware, Citrix Application Delivery Controller, Citrix Mpx\/Sdx 14030 Fips.