CVE-2021-44520

CVE-2021-44520

EPSS 5.6%

In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Command Injection vulnerability, leading to remote code execution with root privileges.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://docs.citrix.com/en-us/xenmobile/server/document-history.html https://gist.github.com/tree-chtsec/766f81e22ae383987d75eedb3b23b709 https://support.citrix.com/article/CTX370551 https://www.chtsecurity.com/news/09be10ae-b50e-46c9-8ce7-2e995fd988fe