CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: May 3, 2022

CVE-2019-19781

High

EPSS 94.4%CISA KEVRansomware

Citrix/Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance

Description

Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an unspecified vulnerability that could allow an unauthenticated attacker to perform code execution.

EPSS — Exploit Probability

94.4%

Higher than 100.0% of all CVEs

Required Action

https://nvd.nist.gov/vuln/detail/CVE-2019-19781

Risk Assessment

CRITICAL

In CISA KEV

High EPSS

Ransomware

Details

Severity: High
EPSS: 94.4%
CISA KEV: Yes
Ransomware: Known
Articles: 0

Timeline

Published

Nov 3, 2021

Added to KEV

Nov 3, 2021

Remediation Due

May 3, 2022

Affected Product

Citrix

Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance

View all Citrix CVEs

External Links

NVD (NIST)CVE Details MITRE CVE