CVE-2020-8197

HIGH

Citrix Application Delivery Controller Firmware < 10.5-70.18 - Privilege Escalation

Title source: rule

Description

Privilege escalation vulnerability on Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 allows a low privileged user with management access to execute arbitrary commands.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://support.citrix.com/article/CTX276688

Scores

CVSS v3 8.8

EPSS 0.0071

EPSS Percentile 72.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

Status published

Products (3)

citrix/application_delivery_controller_firmware 10.5 - 10.5-70.18

citrix/gateway_firmware 13.0 - 13.0-58.30

citrix/netscaler_gateway_firmware 10.5 - 10.5-70.18

Published Jul 10, 2020

Tracked Since Feb 18, 2026