CVE-2020-8190: 
Citrix ADC VPX vulnerability analysis and mitigation

CVE-2020-8190 is a local privilege escalation vulnerability affecting Citrix ADC and Citrix Gateway products before versions 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14, and 10.5-70.18. The vulnerability was discovered and disclosed in July 2020, requiring an authenticated user on the NSIP (NetScaler IP) interface for exploitation (Citrix Blog).

The vulnerability stems from incorrect file permissions in the affected Citrix products. This issue cannot be exploited directly, as an attacker must first obtain 'nobody' privileges using another exploit before leveraging this vulnerability (Citrix Blog).

The vulnerability allows for local privilege escalation if successfully exploited. However, the impact is limited by the requirement of pre-existing access and the need to chain with another exploit to achieve elevation of privileges (Citrix Blog).

The exploitability of this vulnerability is considered limited due to multiple prerequisites. An attacker must first have authenticated access to the NSIP interface and must already have obtained 'nobody' privileges through a separate exploit. At the time of disclosure, Citrix confirmed there were no known exploits in the wild (Citrix Blog).

Citrix has released patches to address this vulnerability in versions 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14, and 10.5-70.18. Organizations are strongly recommended to apply these patches to affected systems. The Citrix-managed Gateway service is not affected by this vulnerability (Citrix Blog).