Exploits for Citrix ADC and Gateway flaw abound, attacks are ongoing - Help Net Security

Exploits for Citrix ADC and Gateway flaw abound, attacks are ongoing - Help Net Security

With several exploits targeting CVE-2019-19781 having been released over the weekend and the number of vulnerable endpoints still being over 25,000, attackers are having a field day.



Do you use Citrix’s Application Delivery Controller (ADC) or Gateway? If you haven’t implemented the mitigations provided by the company, there’s a good change you might have been hit already.


Numerous CVE-2019-19781 exploits available


The existence of CVE-2019-19781 – humorously dubbed Shitrix by cybersecurity researcher Kevin Beaumont – was first made public in late December.


Discovered by Mikhail Klyuchnikov of Positive Technologies, the flaw has yet to be patched. In the meantime, Citrix offered mitigation advice to users.


This doc ..

Support the originator by clicking the read the rest link below.