Citrix been so kindly to add SDWAN WAN OP to CVE201919781 https://support.citrix.com/article/CTX267027 So these are now vulnerable: Citrix SD-WAN WANOP software and appliance models 4000, 4100, 5000, and 5100 all supported builds In Citrix ADC Release 12.1 builds before 51.16/51.19 and 50.31, a bug exists that affects responder and rewrite policies bound to VPN virtual servers causing them not to process the packets that matched policy rules. Citrix recommends customers update to an unaffected build for the mitigation steps to apply properly.