Sd Wan 400 Firmware
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-2049 | Med | 0.42 | 6.5 | 0.00 | Mar 12, 2024 | Server-Side Request Forgery (SSRF) in Citrix SD-WAN Standard/Premium Editions on or after 11.4.0 and before 11.4.4.46 allows an attacker to disclose limited information from the appliance via Access to management IP. | ||
| CVE-2022-27505 | Med | 0.40 | 6.1 | 0.01 | Apr 13, 2022 | Reflected cross site scripting (XSS) | ||
| CVE-2022-27506 | Low | 0.18 | 2.7 | 0.01 | Apr 13, 2022 | Hard-coded credentials allow administrators to access the shell via the SD-WAN CLI |
- risk 0.42cvss 6.5epss 0.00
Server-Side Request Forgery (SSRF) in Citrix SD-WAN Standard/Premium Editions on or after 11.4.0 and before 11.4.4.46 allows an attacker to disclose limited information from the appliance via Access to management IP.
- risk 0.40cvss 6.1epss 0.01
Reflected cross site scripting (XSS)
- risk 0.18cvss 2.7epss 0.01
Hard-coded credentials allow administrators to access the shell via the SD-WAN CLI