Sign inStart freeBook a demo

Gateway Firmware vulnerabilitiesAnd the versions its exploited flaws hit.

Product5 known exploited5 versions
The short answer

Gateway Firmware is made by Citrix. We track 14 published vulnerabilities in it, across 5 versions. 5 of them are on the list of flaws known to be exploited, the newest added on 13 December 2022. If you run Gateway Firmware, check your version against the exploited flaws below and patch those first.

Check your version

The most recent Gateway Firmware flaw added to the known-exploited list is CVE-2022-27518, on 13 December 2022. We keep watching the known-exploited list.

Versions

Which versions of Gateway Firmware do the exploited flaws hit?

Each exploited flaw lists the versions it affects, usually as ranges. "12.1 to before 12.1-65.25" means from 12.1 up to, but not including, 12.1-65.25. Find your version, then patch.

  • CVE-2022-27518Exploited list, 13 Dec 2022

    Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability

    12.1 to before 12.1-65.2513.0 to before 13.0-58.32
  • CVE-2019-19781Exploited list, 3 Nov 2021

    Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability

    13.0
  • CVE-2020-8193Exploited list, 3 Nov 2021

    Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability

    13.0 to before 13.0-58.30
  • CVE-2020-8195Exploited list, 3 Nov 2021

    Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability

    13.0 to before 13.0-58.30
  • CVE-2020-8196Exploited list, 3 Nov 2021

    Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability

    13.0 to before 13.0-58.30
Known exploited

Which Gateway Firmware vulnerabilities are being exploited?

5 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.

  1. 9.8
    CVE-2022-27518CriticalKnown exploited
    Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability

    Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypass vulnerability that allows an attacker to execute code as administrator.

    Chance of use6.9%Known exploited since13 Dec 2022
  2. 9.8
    CVE-2019-19781CriticalKnown exploited
    Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability

    Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an unspecified vulnerability that could allow an unauthenticated attacker to perform code execution.

    Chance of use>99%Known exploited since3 Nov 2021
  3. 6.5
    CVE-2020-8193MediumKnown exploited
    Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability

    Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an authorization bypass vulnerability that may allow unauthenticated access to certain URL endpoints.

    Chance of use88%Known exploited since3 Nov 2021
  4. 6.5
    CVE-2020-8195MediumKnown exploited
    Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability

    Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an information disclosure vulnerability.

    Chance of use33%Known exploited since3 Nov 2021
  5. 4.3
    CVE-2020-8196MediumKnown exploited
    Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability

    Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an information disclosure vulnerability.

    Chance of use26%Known exploited since3 Nov 2021
Exploit likelihood

Which Gateway Firmware flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. >99%
    CVE-2019-19781CriticalKnown exploited

    An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0.

    CVSS9.8Published27 Dec 2019
  2. 88%
    CVE-2020-8193MediumKnown exploited

    Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows...

    CVSS6.5Published10 Jul 2020
  3. 33%
    CVE-2020-8195MediumKnown exploited

    Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting...

    CVSS6.5Published10 Jul 2020
  4. 26%
    CVE-2020-8196MediumKnown exploited

    Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in...

    CVSS4.3Published10 Jul 2020
  5. 23%
    CVE-2020-8191Medium

    Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows...

    CVSS6.1Published10 Jul 2020
  6. 11%
    CVE-2020-8194Medium

    Reflected code injection in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows the...

    CVSS6.5Published10 Jul 2020
  7. 6.9%
    CVE-2022-27518CriticalKnown exploited

    Unauthenticated remote arbitrary code execution

    CVSS9.8Published13 Dec 2022
  8. 2.7%
    CVE-2020-10110Medium

    Citrix Gateway 11.1, 12.0, and 12.1 allows Information Exposure Through Caching.

    CVSS5.3Published6 Mar 2020
  9. 2.0%
    CVE-2020-10111High

    Citrix Gateway 11.1, 12.0, and 12.1 has an Inconsistent Interpretation of HTTP Requests.

    CVSS7.5Published6 Mar 2020
  10. 1.8%
    CVE-2020-8197High

    Privilege escalation vulnerability on Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 allows a low privileged user with management access to execute...

    CVSS8.8Published10 Jul 2020
EdgeProtect

Running Gateway Firmware? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Start free →Book a demo

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

We track 14 published vulnerabilities listed under the name Gateway Firmware, across 5 versions. The most recent Gateway Firmware flaw added to the known-exploited list is CVE-2022-27518, on 13 December 2022.

5 are on the list of flaws known to be exploited. The most recently added are CVE-2022-27518, CVE-2019-19781 and CVE-2020-8193.

Each flaw names its own versions, usually as ranges. The newest, CVE-2022-27518, affects 12.1 to before 12.1-65.25, 13.0 to before 13.0-58.32. The versions for every exploited flaw are listed on this page.

Create a EdgeProtect account and track Gateway Firmware. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.

Keep exploring