Server-Side Request Forgery (SSRF) in Citrix SD-WAN Standard/Premium Editions on or after 11.4.0 and before 11.4.4.46 allows an attacker to disclose limited information from the appliance via Access to management IP.
AI analysis not yet available
Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.
No Fix Known
No patch has been released yet. Apply workarounds or mitigations where available.
| Vendor | Product | Versions | Fixed In |
|---|---|---|---|
| citrix | sd-wan_1000_firmware | 11.4.0 - 11.4.4.46 | - |
| citrix | sd-wan_110_firmware | 11.4.0 - 11.4.4.46 | - |
| citrix | sd-wan_1100_firmware |
Published
CVE disclosed publicly
Last Modified
Most recent update
Indexed to CVEInsight
Added to this platform
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
18
Affected Products
3
References
citrix / sd-wan_1000_firmware
| 11.4.0 - 11.4.4.46 |
| - |
| citrix | sd-wan_2000_firmware | 11.4.0 - 11.4.4.46 | - |
| citrix | sd-wan_210_firmware | 11.4.0 - 11.4.4.46 | - |
| citrix | sd-wan_2100_firmware | 11.4.0 - 11.4.4.46 | - |
| citrix | sd-wan_400_firmware | 11.4.0 - 11.4.4.46 | - |
| citrix | sd-wan_4000_firmware | 11.4.0 - 11.4.4.46 | - |
| citrix | sd-wan_410_firmware | 11.4.0 - 11.4.4.46 | - |
| citrix | sd-wan_4100_firmware | 11.4.0 - 11.4.4.46 | - |
| citrix | sd-wan_5100_firmware | 11.4.0 - 11.4.4.46 | - |
| citrix | sd-wan_6100_firmware | 11.4.0 - 11.4.4.46 | - |
| citrix | sd-wan_1000_firmware | 11.4.0 - 11.4.4.46 | - |
| citrix | sd-wan_1100_firmware | 11.4.0 - 11.4.4.46 | - |
| citrix | sd-wan_2000_firmware | 11.4.0 - 11.4.4.46 | - |
| citrix | sd-wan_2100_firmware | 11.4.0 - 11.4.4.46 | - |
| citrix | sd-wan_6100_firmware | 11.4.0 - 11.4.4.46 | - |
| citrix | sd-wan_5100_firmware | 11.4.0 - 11.4.4.46 | - |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Exploitability
Impact