CVE-2017-14602
A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gat…
Published 9 y ago · modified 4 mo ago · JSON
Summary
A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before build 135.18, 10.5 before build 66.9, 10.5e before build 60.7010.e, 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13 (except for build 41.24) that, if exploited, could allow an attacker with access to the NetScaler management interface to gain administrative access to the appliance.
Exploit prediction (EPSS)
2.42% probability of exploitation in the next 30 days, higher than 84% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 7.2 | CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 9.0 | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Classification
- Weakness
- CWE-287 Improper Authentication
References
- support.citrix.com /article/CTX228091 · x_refsource_CONFIRM, x_transferred
- support.citrix.com /article/CTX227928 · x_refsource_CONFIRM, x_transferred
- securityfocus.com /bid/100980 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2017-14602
- NVD: CVE-2017-14602
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.