CVE-2021-22919

Published: Aug 5, 2021Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO. These vulnerabilities, if exploited, could lead to the limited available disk space on the appliances being fully consumed.

Affected (11)

Products: Citrix: Application Delivery Controller Firmware, Gateway, Netscaler Gateway, Sd Wan Wanop

Citrix

4 products

Application Delivery Controller Firmware

Gateway

Netscaler Gateway

Sd Wan Wanop

Configuration A

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Citrix Application Delivery Controller Firmware	From 11.1 to 11.1-65.22
Citrix Application Delivery Controller Firmware	From 12.1 to 12.1-62.27
Citrix Application Delivery Controller Firmware	From 13.0 to 13.0-82.45

Running on/with	Platform Versions
Citrix Application Delivery Controller	All versions

Configuration B

1 vulnerable · 12 platform

Vulnerable Software	Affected Versions
Citrix Application Delivery Controller Firmware	From 12.1 to 12.1-55.238

Running on/with	Platform Versions
Citrix Mpx/sdx 14030 Fips	All versions
Citrix Mpx/sdx 14060 Fips	All versions
Citrix Mpx/sdx 14080 Fips	All versions
Citrix Mpx 15030 50g Fips	All versions
Citrix Mpx 15040 50g Fips	All versions
Citrix Mpx 15060 50g Fips	All versions
Citrix Mpx 15080 50g Fips	All versions
Citrix Mpx 15100 50g Fips	All versions
Citrix Mpx 15120 50g Fips	All versions
Citrix Mpx 8905 Fips	All versions
Citrix Mpx 8910 Fips	All versions
Citrix Mpx 8920 Fips	All versions

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Citrix Gateway	From 12.1 to 12.1-62.27
Citrix Gateway	From 13.0 to 13.0-82.45
Citrix Netscaler Gateway	From 11.1 to 11.1-65.22

Configuration D

4 vulnerable · 4 platform

Vulnerable Software	Affected Versions
Citrix Sd Wan Wanop	From 10.2 to 10.2.9.b
Citrix Sd Wan Wanop	From 11.2 to 11.2.3.b
Citrix Sd Wan Wanop	From 11.3 to 11.3.2.a
Citrix Sd Wan Wanop	From 11.4 to 11.4.0.a

Running on/with	Platform Versions
Citrix 4000 Wo	All versions
Citrix 4100 Wo	All versions
Citrix 5000 Wo	All versions
Citrix 5100 Wo	All versions

Related CWEs

CWE-770

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (2)

https://support.citrix.com/article/CTX319135

Source: support@hackerone.com

Vendor Advisory

https://support.citrix.com/article/CTX319135

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.