Critical Vulnerability in Citrix Products Let Hackers Access to 80,000 Companies Internal Network

A researcher discovered a critical vulnerability in Citrix Application Delivery Controller (NetScaler ADC) & Citrix Gateway (NetScaler Gateway) let external hackers access to the company’s local network remotely.

Experts believe that at least 80,000 companies could have affected around the globe including the United States with over 38 percent of all vulnerable organizations, the UK, Germany, the Netherlands, and Australia.

The Delivery Controller is the server-side component that is responsible for managing user access, plus brokering and optimizing connections.  Controllers also provide the Machine Creation Services that create desktop and server images.

The vulnerability can be tracked as CVE-2019-19781, and the vulnerability severity is “high” which creates a serious threat to the organization deployed with Citrix Application Delivery Controller and gateway.

 This vulnerability affects all supported versions of the product, and all supported platforms, including the following:

  • Citrix ADC and Citrix Gateway 13.0
  • Citrix ADC and NetScaler Gateway 12.1
  • Citrix ADC and NetScaler Gateway 12.0
  • Citrix ADC and NetScaler Gateway 11.1
  • Citrix NetScaler ADC and NetScaler Gateway 10.5.

According to Positive Technologies report, The vulnerability affects the company depends on the specific configuration, and it allows any unauthorized attacker to not only access published applications but also attack other resources of the company’s internal network from the Citrix server,

According to Dmitry Serebryannikov from PT, “Citrix applications are widely used in corporate networks. This includes their use for providing terminal access of employees to internal company applications from any device via the Internet. Considering the high risk brought by the discovered vulnerability, and how widespread Citrix software is in the business community, we recommend information security professionals take immediate steps to mitigate the threat,” 

Citrix security bulletin Report said CTX267027: A vulnerability in Citrix Application Delivery Controller (ADC), formerly known as NetScaler ADC, and Citrix Gateway, formerly known as NetScaler Gateway, that could lead to arbitrary code execution.”

To avoid such attacks, companies are recommended to use web application firewalls.

Also Read: Unpatched Dropbox for Windows Zero-Day Bug Let Hackers get SYSTEM Privileges

Balaji

BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Recent Posts

Threat Actors Manipulate Search Results to Lure Users to Malicious Websites

Cybercriminals are increasingly exploiting search engine optimization (SEO) techniques and paid advertisements to manipulate search…

1 day ago

Hackers Imitate Google Chrome Install Page on Google Play to Distribute Android Malware

Cybersecurity experts have unearthed an intricate cyber campaign that leverages deceptive websites posing as the…

1 day ago

Dangling DNS Attack Allows Hackers to Take Over Organization’s Subdomain

Hackers are exploiting what's known as "Dangling DNS" records to take over corporate subdomains, posing…

1 day ago

HelloKitty Ransomware Returns, Launching Attacks on Windows, Linux, and ESXi Environments

Security researchers and cybersecurity experts have recently uncovered new variants of the notorious HelloKitty ransomware,…

1 day ago

RansomHub Ransomware Group Hits 84 Organizations as New Threat Actors Emerge

The RansomHub ransomware group has emerged as a significant danger, targeting a wide array of…

1 day ago

Threat Actors Leverage Email Bombing to Evade Security Tools and Conceal Malicious Activity

Threat actors are increasingly using email bombing to bypass security protocols and facilitate further malicious…

2 days ago