CVE-2024-2049

medium

Description

Server-Side Request Forgery (SSRF) in Citrix SD-WAN Standard/Premium Editions on or after 11.4.0 and before 11.4.4.46 allows an attacker to disclose limited information from the appliance via Access to management IP.

References

https://support.citrix.com/external/article?articleUrl=CTX617071-citrix-sdwan-security-bulletin-for-cve20242049&language=en_US

https://support.citrix.com/article/CTX617071/citrix-sdwan-security-bulletin-for-cve20242049

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-27014

Details

Source: Mitre, NVD

Published: 2024-03-12

Updated: 2025-07-25

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N