CVE-2015-5538
HighSummary
Multiple unspecified vulnerabilities in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 132.8, 10.5 before Build 57.7, and 10.5e before Build 56.1505.e allow remote attackers to gain privileges via unknown vectors, related to the Command Line Interface (CLI) and the Web User Interface (UI).
Risk Assessment
Attackers may exploit these vulnerabilities to gain unauthorized access and elevate their privileges, potentially leading to serious security breaches within the organization.
Recommendation
It is recommended to update Citrix NetScaler to the latest version to mitigate these vulnerabilities and to monitor systems for unauthorized access attempts.
Other vulnerabilities in Citrix NetScaler Application Delivery Controller (ADC) i NetScaler Gateway
See all- CVE-2017-14602High
A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway in versions before specified builds, which could allow an attacker to gain administrative access to the appliance.
- CVE-2015-5080High
The Management Interface in Citrix NetScaler ADC and NetScaler Gateway before version 10.1.132.8 and 10.5 before Build 56.15 allows remote authenticated users to execute arbitrary shell commands via shell metacharacters in the filter parameter to rapi/ipsec_logs.
- CVE-2015-2829High
Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.5 Build 53.9 through 55.8 and 10.5.e Build 53-9010.e are vulnerable to remote attacks that can cause a denial of service (reboot) via unspecified vectors.
- CVE-2014-7140High
Unspecified vulnerability in the management interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.x before version 10.1-129.11 and 10.5 before version 10.5-50.10 allows remote attackers to execute arbitrary code via unknown vectors.
- CVE-2014-2881High
Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler ADC and NetScaler Gateway before version 9.3-66.5 and 10.x before version 10.1-122.17.
- CVE-2016-2071Critical
Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway versions 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, and 10.5.e before Build 59.1305.e allow remote attackers to gain privileges via unspecified NS Web GUI commands.
Original NVD description (English source)
Multiple unspecified vulnerabilities in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 132.8, 10.5 before Build 57.7, and 10.5e before Build 56.1505.e allow remote attackers to gain privileges via unknown vectors, related to the (1) Command Line Interface (CLI) and the (2) Web User Interface (UI).