tsplus advanced security vulnerabilities

In almost every case, Citrix applications are accessible on the company network perimeter, and are therefore the first to be attacked. This vulnerability affectedĪll supported versions of the product, and all supported platforms, includingĬitrix ADC and Citrix Gateway 13.0, Citrix ADC and NetScaler Gateway 12.1,Ĭitrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1,Īnd also Citrix NetScaler ADC and NetScaler Gateway 10.5.ĭepending on specific configuration, Citrix applications can be used for connecting to workstations and critical business systems (including ERP). The vendor has not officially assigned aĬVSS severity level to this vulnerability yet, but Positive TechnologiesĮxperts believe it had the highest level, a 10². The discovered vulnerability was assigned Nearly 10,000 Citrix servers at risk in the US, over 2,500 in Germany, aroundĢ,000 in the UK, and over 1,100 in Australia and Switzerland. That at least 80,000 companies in 158 countries were potentially at risk. This attack does not require access to any accounts, and thereforeĬan be performed by any external attacker”. The critical vulnerabilities were uncovered and disclosed before Christmas 2019.Īttackers obtain direct access to the company’s local network from the Mikhail Klyuchnikov, Positive Technologies expert, discovered a critical vulnerability in Citrix Application Delivery Controller¹ (NetScaler ADC) and Citrix Gateway (NetScaler Gateway). Citrix has been working on a code fix to eliminate Per a Citrix spokesperson, the company has taken measures toĪddress the vulnerability, issuing to its customers a series of steps that Vulnerability in its Application Delivery Controller and Gateway software hadīeen discovered. In less than a minute, anĮxternal attacker could get inside the companies’ internal networks. 80,000 companies in 158 countries were at risk.

Tsplus advanced security vulnerabilities