====================================================================

                             CERT-Renater

                 Note d'Information No. 2020/VULN010
_____________________________________________________________________

DATE                : 14/01/2020

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running Citrix SD-WAN versions prior to
                                  10.2.6, 11.0.3,
                     NetScaler SD-WAN versions 10.0.x and earlier.

=====================================================================
https://support.citrix.com/article/CTX263526
_____________________________________________________________________


Applicable Products

    Citrix SD-WAN
    Citrix SD-WAN 10.1
    NetScaler SD-WAN 10.0


Description of Problem

An information disclosure vulnerability has been identified in the
Citrix SD-WAN Appliance. This vulnerability could allow an
unauthenticated attacker to perform a man-in-the-middle attack against
management traffic. The vulnerability has been assigned the following
CVE number.


CVE-2020-6175 – Information Disclosure in Citrix SD-WAN Appliance 10.2.x
before 10.2.6 and 11.0.x before 11.0.3


Affected Versions:

    All versions of NetScaler SD-WAN 10.0.x and earlier *
    All versions of Citrix SD-WAN 10.1.x *
    All versions of Citrix SD-WAN 10.2.x earlier than 10.2.6
    All versions of Citrix SD-WAN 11.0.x earlier than 11.0.3


*  Upgrade to 10.2.6, 11.0.3, or newer for security update


Mitigating Factors

In order to protect against these vulnerabilities and web application
related issues, Citrix recommends access to the management interface be
restricted. In situations where customers have deployed their appliances
in line with industry best practice, network access to this interface
should already be restricted and default system certificates should be
replaced by certificates from a reputable Certificate Authority.

Security Best Practices:

10.2.x -
https://docs.citrix.com/en-us/citrix-sd-wan/10-2/best-practices/security-best-practices.html

11.x -
https://docs.citrix.com/en-us/citrix-sd-wan/11/best-practices/security-best-practices.html


What Customers Should Do

This vulnerability has been addressed in the following software
versions:

    Citrix SD-WAN 10.2.6
    Citrix SD-WAN 11.0.3

Citrix strongly recommends that customers using vulnerable combinations
of hardware and software upgrade their appliances to a fixed version or
later as soon as possible.

Citrix also recommends that customers either: replace default system
certificates by uploading and installing certificates from a reputable
Certificate Authority, or regenerate their self-signed certificate. The
functionality for both actions can be accessed at:
Configuration> Appliance Settings> Administrator Interface> HTTPS Certs
in the SD-WAN appliance GUI as described in the Best Practices Guide
under section “Secure administrator interface”.

The new software versions will be available on the Citrix website.
Information on the available versions can be found at the following
location:

https://www.citrix.com/downloads/netscaler-sd-wan/

In line with general best practice, Citrix also recommends that
customers limit access to the management console of the Citrix SD-WAN
Appliance to trusted network traffic only.


What Citrix Is Doing

Citrix is notifying customers and channel partners about this potential
security issue. This article is also available from the Citrix Knowledge
Center at  http://support.citrix.com/.


Obtaining Support on This Issue

If you require technical assistance with this issue, please contact
Citrix Technical Support. Contact details for Citrix Technical Support
are available at
 https://www.citrix.com/support/open-a-support-case.html.


Reporting Security Vulnerabilities

Citrix welcomes input regarding the security of its products and
considers any and all potential vulnerabilities seriously. For guidance
on how to report security-related issues to Citrix, please see the
following document: CTX081743 – Reporting Security Issues to Citrix


Changelog
Date                    Change
9th January 2020 	Initial Publication

=========================================================
+ CERT-RENATER        | tel : 01-53-94-20-44            +
+ 23/25 Rue Daviel    | fax : 01-53-94-20-41            +
+ 75013 Paris         | email:cert@support.renater.fr   +
=========================================================