Exploit for #VU24233 Path traversal in Citrix NetScaler Application Delivery Controller

Vulnerability identifier: #VU24233

Vulnerability risk: Critical

CVSSv4.0: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Red]

CVE-ID: CVE-2019-19781

CWE-ID: CWE-22

Exploitation vector: Network

Exploits in database: 20

• June 17, 2021
  • Citrix Application Delivery Controller and Citrix Gateway - Remote Code Execution (PoC) [Exploit-DB]
  • Citrix Application Delivery Controller and Citrix Gateway - Remote Code Execution [Exploit-DB]
  • Citrix Application Delivery Controller and Gateway 10.5 - Remote Code Execution (Metasploit) [Exploit-DB]
  • Citrix Application Delivery Controller (ADC) and Gateway 13.0 - Path Traversal [Exploit-DB]
• May 9, 2021
  • Citrix ADC (NetScaler) Directory Traversal RCE [Metasploit]
• July 30, 2020
  • CVE-2019-19781 (Shitrix : CVE-2019-19781 - Remote Code Execution on Citrix ADC Netscaler exploit ) [Github]
• May 12, 2020
  • Remote-Code-Execution-Exploit-for-Citrix-Application-Delivery-Controller-and-Citrix-Gateway-CVE-201 (This document explain Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway [CVE-2019-19781]) [Github]
• March 18, 2020
  • citrix_dir_traversal_rce (The exploitation module for the CVE-2019-19781 #Shitrix (Vulnerability in Citrix Application Delivery Controller and Citrix Gateway).) [Github]
  • CVE-2019-19781 (CVE-2019-19781 - Remote Code Execution on Citrix ADC Netscaler exploit) [Github]
  • citrix.sh (CVE-2019-19781 bash exploit ) [Github]
  • CitrixHoneypot (Detect and log CVE-2019-19781 scan and exploitation attempts.) [Github]
  • Citrix ADC (NetScaler) Directory Traversal Scanner [Metasploit]
  • Citrix ADC (NetScaler) Directory Traversal RCE [Metasploit]
  • CVE-2019-19781 (Python CVE-2019-19781 exploit) [Github]
  • cve-2019-19781 (This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.) [Github]
  • Shitrix-CVE-2019-19781 (My working exploit script for Shitrix (CVE-2019-19781)) [Github]
  • CVE-2019-19781 (Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway [ CVE-2019-19781 ]) [Github]
  • CVE-2020-0601 (Remote Code Execution Exploit ) [Github]
  • Exploits_CVE-2019-19781 (All Working Exploits) [Github]
  • CVE-2019-19781 (Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway [ CVE-2019-19781 ]) [Github]

Vulnerable software:
Citrix NetScaler Application Delivery Controller
Server applications / Application servers

Vendor: Citrix