CVE-2020-8196

Citrix ADC/Gateway/SD-WAN appliances suffer an information disclosure flaw actively exploited in the wild, exposing sensitive data and undermining trust in a vendor with a recent history of critical RCE 0-days.

Citrix ADC, Gateway, and SD-WAN WANOP appliances contain an information disclosure vulnerability that allows attackers to extract sensitive data, a risk amplified by the vendor's November 2021 cluster of critical flaws including an actively exploited RCE 0-day. DIB organizations must urgently patch these systems to prevent data exfiltration and avoid reliance on a vendor with a demonstrably high-risk security track record.

Shame score — The flaw is actively exploited in the wild (KEV), involves a vendor with a recent history of critical RCE 0-days, and represents a severe breach of trust for a critical infrastructure component.