CVE-2024-2049

Summary

CVE-2024-2049 is a newly disclosed Server-Side Request Forgery (SSRF) vulnerability affecting Citrix SD-WAN Standard/Premium Editions versions 11.4.0 to 11.4.4.45. This issue permits attackers to access limited information from the appliance by manipulating malicious requests. SSRF vulnerabilities can potentially lead to more serious consequences, such as unauthorized access to internal systems or data exfiltration, making it a significant security risk that should be addressed promptly by affected organizations. Citrix has released a patch to mitigate this vulnerability; it is strongly recommended that users upgrade to the latest version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.