# CVE-2019-19781

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.

- Page: https://www.vulneraibility.com/cve/CVE-2019-19781
- CVSS: 9.8
- Known exploited: yes, in CISA KEV since 2021-11-03; CISA due date 2022-05-03; known ransomware use
- EPSS: 100.00% (percentile 100.0)
- Public exploit code: 3 on Exploit-DB · 2 Metasploit modules · 44 GitHub proofs of concept · 1 Nuclei template (first 2020-01-10)
- CISA SSVC: exploitation active, automatable yes, technical impact total (assessed 2020-01-08)
- Weakness: CWE-22
- Published: 2019-12-27

## Affected

- citrix:application_delivery_controller_firmware
- citrix:netscaler_gateway_firmware
- citrix:gateway_firmware

## References

- [other] https://support.citrix.com/article/CTX267027
- [advisory] https://www.kb.cert.org/vuls/id/619785
- [other] https://twitter.com/bad_packets/status/1215431625766424576
- [other] https://badpackets.net/over-25000-citrix-netscaler-endpoints-vulnerable-to-cve-2019-19781/
- [other] https://forms.gle/eDf3DXZAv96oosfj6
- [other] http://packetstormsecurity.com/files/155904/Citrix-Application-Delivery-Controller-Gateway-Remote-Code-Execution.html
- [other] http://packetstormsecurity.com/files/155930/Citrix-Application-Delivery-Controller-Gateway-10.5-Remote-Code-Execution.html
- [other] http://packetstormsecurity.com/files/155905/Citrix-Application-Delivery-Controller-Gateway-Remote-Code-Execution-Traversal.html
- [other] http://packetstormsecurity.com/files/155947/Citrix-ADC-NetScaler-Directory-Traversal-Remote-Code-Execution.html
- [other] http://packetstormsecurity.com/files/155972/Citrix-ADC-Gateway-Path-Traversal.html
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-19781

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.