CVE-2020-8299

MEDIUM

6.5

CVSS Score

Published: June 16, 2021 at 01:08 PM UTC

Updated: June 17, 2026 at 03:26 AM UTC

17 products affected across 1 vendorNetScaler GatewayGatewayApplication Delivery Controller Firmware

Using Citrix ADC, Citrix Gateway, Citrix SD-WAN WANOP Edition by N/A?

Get instant alerts when new vulnerabilities affect Citrix ADC, Citrix Gateway, Citrix SD-WAN WANOP Edition - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.5

Exploit prediction

EPSS 0.4%

Description

Citrix ADC and Citrix/NetScaler Gateway 13.0 before 13.0-76.29, 12.1-61.18, 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238, and Citrix SD-WAN WANOP Edition before 11.4.0, 11.3.2, 11.3.1a, 11.2.3a, 11.1.2c, 10.2.9a suffers from uncontrolled resource consumption by way of a network-based denial-of-service from within the same Layer 2 network segment. Note that the attacker must be in the same Layer 2 network segment as the vulnerable appliance.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Application Delivery Controller Firmware · Citrix

95%

11.1 ≤ v < 11.1-65.2012.1 ≤ v < 12.1-55.23812.1 ≤ v < 12.1-61.1813.0 ≤ v < 13.0-76.29

Affected range stops below 11.1-65.20, so it looks safe — our inference, not a vendor statement

Affected range stops below 12.1-55.238, so it looks safe — our inference, not a vendor statement

Affected range stops below 12.1-61.18, so it looks safe — our inference, not a vendor statement

Affected range stops below 13.0-76.29, so it looks safe — our inference, not a vendor statement

citrix-mpx-15030-50g-fips (environment) · citrix-mpx-15040-50g-fips (environment) · citrix-mpx-15060-50g-fips (environment) · citrix-mpx-15080-50g-fips (environment) · citrix-mpx-15100-50g-fips (environment) · citrix-mpx-15120-50g-fips (environment) · citrix-mpx-8905-fips (environment) · citrix-mpx-8910-fips (environment) · citrix-mpx-8920-fips (environment) · citrix-mpx-sdx-14030-fips (environment) · citrix-mpx-sdx-14060-fips (environment) · citrix-mpx-sdx-14080-fips (environment) · citrix-application-delivery-controller (same device)

Gateway · Citrix

95%

12.1 ≤ v < 12.1-61.1813.0 ≤ v < 13.0-76.29

Affected range stops below 12.1-61.18, so it looks safe — our inference, not a vendor statement

Vendor states this is fixed in 13.0-76.29 (unaffected)

NetScaler Gateway · Citrix

95%

11.1 ≤ v < 11.1-65.20

Affected range stops below 11.1-65.20, so it looks safe — our inference, not a vendor statement

Sd WAN Wanop · Citrix

95%

10.2 ≤ v < 10.2.9a11.1 ≤ v < 11.1.2c11.2 ≤ v < 11.2.3a11.3 ≤ v < 11.3.2