CVE-2015-5080
HighSummary
The Management Interface in Citrix NetScaler ADC and NetScaler Gateway before version 10.1.132.8 and 10.5 before Build 56.15 allows remote authenticated users to execute arbitrary shell commands via shell metacharacters in the filter parameter to rapi/ipsec_logs.
Risk Assessment
This vulnerability may lead to unauthorized access to the system and execution of malicious code, posing a serious security threat to the organization.
Recommendation
It is recommended to update to the latest version of the software to mitigate this vulnerability and restrict access to the management interface to trusted users.
Other vulnerabilities in Citrix NetScaler Application Delivery Controller (ADC) i NetScaler Gateway
See all- CVE-2017-14602High
A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway in versions before specified builds, which could allow an attacker to gain administrative access to the appliance.
- CVE-2015-5538High
Multiple unspecified vulnerabilities in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 132.8, 10.5 before Build 57.7, and 10.5e before Build 56.1505.e allow remote attackers to gain privileges via unknown vectors, related to the Command Line Interface (CLI) and the Web User Interface (UI).
- CVE-2015-2829High
Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.5 Build 53.9 through 55.8 and 10.5.e Build 53-9010.e are vulnerable to remote attacks that can cause a denial of service (reboot) via unspecified vectors.
- CVE-2014-7140High
Unspecified vulnerability in the management interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.x before version 10.1-129.11 and 10.5 before version 10.5-50.10 allows remote attackers to execute arbitrary code via unknown vectors.
- CVE-2014-2881High
Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler ADC and NetScaler Gateway before version 9.3-66.5 and 10.x before version 10.1-122.17.
- CVE-2016-2071Critical
Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway versions 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, and 10.5.e before Build 59.1305.e allow remote attackers to gain privileges via unspecified NS Web GUI commands.
Original NVD description (English source)
The Management Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before 10.1.132.8, 10.5 before Build 56.15, and 10.5.e before Build 56.1505.e allows remote authenticated users to execute arbitrary shell commands via shell metacharacters in the filter parameter to rapi/ipsec_logs.