Security News > 2020 > February > Good: IT admins scrambled to patch 80 per cent of public-facing Citrix boxes to close nightmare hijack hole

Roughly a fifth of the public-facing Citrix devices vulnerable to the CVE-2019-19781 remote-hijacking flaw, aka Shitrix, remain unpatched and open to remote attack.

Positive Technologies today estimated that thousands of companies remain open to the takeover vulnerability in Citrix ADC and Gateway.

"Overall, the vulnerability is being fixed quickly, but 19 per cent of companies are still at risk. The countries with the greatest numbers of vulnerable companies currently include Brazil, China, Russia, France, Italy, and Spain," Positive reports.

Considering how many machines are exposed to months and even years-old vulnerabilities, having 80 per cent of all boxes in the wild patched in under two months is to be commended.

That said, the remaining 20 per cent of internet-facing machines should get patched ASAP, especially as there are now plug-and-play exploits being used in the wild.

News URL

https://go.theregister.co.uk/feed/www.theregister.co.uk/2020/02/06/citrix_boxes_patched/