CVE-2020-8270 Command injection in Citrix Virtual Apps and Desktops
Unprivileged users can execute arbitrary commands as SYSTEM on Citrix Virtual Apps and Desktops servers.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-8270?
CVE-2020-8270 is a high-severity command injection vulnerability in Citrix Virtual Apps and Desktops, published on 16 Nov 2020. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
An unprivileged Windows user on the VDA or an SMB user can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285871 and CTX285872, 7.15 LTSR CU6 hotfix CTX285341 and CTX285342
Weakness: CWE-78
Which versions are affected by CVE-2020-8270?
It affects 1 product.
Products include Citrix Virtual Apps and Desktops.
How do I fix CVE-2020-8270?
No fix has been published for CVE-2020-8270 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2020-8270 being exploited?
There is no known exploitation of CVE-2020-8270 in the wild and no public exploit code.
Other vulnerabilities in Citrix Virtual Apps and Desktops
- CVE-2020-8283 Privilege escalation in Citrix Virtual Apps and Desktops
- CVE-2020-8269 Privilege escalation in Citrix Virtual Apps and Desktops
- CVE-2024-6151 Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges
- CVE-2023-24483 Privilege Escalation to NT AUTHORITY\SYSTEM on the vulnerable VDA
- CVE-2021-22928 Privilege escalation in Citrix Virtual Apps and Desktops
Sources
Also known as GHSA-5rfq-7599-rxw9.