ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2024-2049

—
CVSS 3.1
5.3 medium
EPSS
<1%p30
Published
()
Modified
Description

Server-Side Request Forgery (SSRF) in Citrix SD-WAN Standard/Premium Editions on or after 11.4.0 and before 11.4.4.46 allows an attacker to disclose limited information from the appliance via Access to management IP.

Vendors
citrix
Products
sd-wan 1000 firmware, sd-wan 110 firmware, sd-wan 1100 firmware, sd-wan 2000 firmware, sd-wan 210 firmware, sd-wan 2100 firmware, sd-wan 400 firmware, sd-wan 4000 firmware, sd-wan 410 firmware, sd-wan 4100 firmware, sd-wan 5100 firmware, sd-wan 6100 firmware
Weakness
CWE-918
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news

No ingested article mentions this CVE yet.