VPX 10 VPX 200 MPX 7500 (replaced by Cloudbridge Connector) EN 17-May-13
Citrix-SD-WAN-VPX-10-VPX-200-MPX-7500-EN
Virtual Appliance
· Citrix SD-WAN Series
Is the VPX 10 VPX 200 MPX 7500 (replaced by Cloudbridge Connector) EN 17-May-13 still supported?
No. Citrix ended support for the VPX 10 VPX 200 MPX 7500 (replaced by Cloudbridge Connector) EN 17-May-13 on 2018-09-30. No further security fixes will be issued. See Citrix's lifecycle bulletin.
When does the VPX 10 VPX 200 MPX 7500 (replaced by Cloudbridge Connector) EN 17-May-13 reach end of support?
Citrix support for the VPX 10 VPX 200 MPX 7500 (replaced by Cloudbridge Connector) EN 17-May-13 ends on 2018-09-30.
What replaces the VPX 10 VPX 200 MPX 7500 (replaced by Cloudbridge Connector) EN 17-May-13?
Citrix has not published a successor model for the VPX 10 VPX 200 MPX 7500 (replaced by Cloudbridge Connector) EN 17-May-13.
What known-exploited CVEs apply to the VPX 10 VPX 200 MPX 7500 (replaced by Cloudbridge Connector) EN 17-May-13 past end of support?
7 CVEs in CISA's Known Exploited Vulnerabilities catalog apply to the platform the VPX 10 VPX 200 MPX 7500 (replaced by Cloudbridge Connector) EN 17-May-13 runs. These will not be patched on this device because it is past the Citrix security-support date. See the Known Exploited Vulnerabilities table below for the full list.
Known Exploited Vulnerabilities
This device is past Citrix's security-support date. 7 CVEs in CISA's Known Exploited Vulnerabilities catalog apply to the platform it runs. Citrix is not issuing patches for this model. Isolate, compensate, or refresh.
| CVE | KEV added | Vulnerability | Flags |
|---|---|---|---|
CVE-2019-12991
|
Citrix SD-WAN and NetScaler Command Injection Vulnerability | ||
CVE-2019-12989
|
Citrix SD-WAN and NetScaler SQL Injection Vulnerability | ||
CVE-2017-6316
|
Citrix Multiple Products Remote Code Execution Vulnerability | ||
CVE-2020-8193
|
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability | ||
CVE-2020-8195
|
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | ||
CVE-2020-8196
|
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | ||
CVE-2019-19781
|
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability | Ransomware |
Source: CISA Known Exploited Vulnerabilities catalog. The Ransomware flag reflects CISA's own knownRansomwareCampaignUse field, set when the CVE has been observed in ransomware campaigns per their threat intel. It's not a property of the vulnerability description itself.
Correlation is at the platform level, not per-OS-version. Not exhaustive: KEV only lists actively-exploited CVEs and many relevant unexploited vulnerabilities are not here. Verify against vendor security advisories (PSIRT, JSA, PAN-SA) and NVD before acting. See compensating controls if refresh isn't immediate.
VPX 10 VPX 200 MPX 7500 (replaced by Cloudbridge Connector) EN 17-May-13 Lifecycle Overview
The Citrix VPX 10 VPX 200 MPX 7500 (replaced by Cloudbridge Connector) EN 17-May-13 (Citrix-SD-WAN-VPX-10-VPX-200-MPX-7500-EN) is a virtual appliance product in the Citrix Citrix SD-WAN series. This product has reached end of life as of , meaning Citrix no longer provides technical support, software updates, or hardware replacement for this product. It was last available for purchase on . Organizations still running the VPX 10 VPX 200 MPX 7500 (replaced by Cloudbridge Connector) EN 17-May-13 should plan a migration .
Lifecycle Milestones
| Lifecycle notice published | 13y 5mo ago | |
|---|---|---|
| End of sale | 13y 1mo ago | |
| End of software maintenance | 8y 1mo ago | |
| Last date of support | 8y 1mo ago |