CVE-2017-14602
HighSummary
A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway in versions before specified builds, which could allow an attacker to gain administrative access to the appliance.
Risk Assessment
If exploited, this vulnerability could allow an attacker with access to the NetScaler management interface to take control of the device, posing a serious security threat to the organization.
Recommendation
It is recommended to update to the latest software versions that include patches for this vulnerability to minimize the risk of unauthorized access.
Other vulnerabilities in Citrix NetScaler Application Delivery Controller (ADC) i NetScaler Gateway
See all- CVE-2015-5538High
Multiple unspecified vulnerabilities in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 132.8, 10.5 before Build 57.7, and 10.5e before Build 56.1505.e allow remote attackers to gain privileges via unknown vectors, related to the Command Line Interface (CLI) and the Web User Interface (UI).
- CVE-2015-5080High
The Management Interface in Citrix NetScaler ADC and NetScaler Gateway before version 10.1.132.8 and 10.5 before Build 56.15 allows remote authenticated users to execute arbitrary shell commands via shell metacharacters in the filter parameter to rapi/ipsec_logs.
- CVE-2015-2829High
Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.5 Build 53.9 through 55.8 and 10.5.e Build 53-9010.e are vulnerable to remote attacks that can cause a denial of service (reboot) via unspecified vectors.
- CVE-2014-7140High
Unspecified vulnerability in the management interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.x before version 10.1-129.11 and 10.5 before version 10.5-50.10 allows remote attackers to execute arbitrary code via unknown vectors.
- CVE-2014-2881High
Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler ADC and NetScaler Gateway before version 9.3-66.5 and 10.x before version 10.1-122.17.
- CVE-2016-2071Critical
Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway versions 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, and 10.5.e before Build 59.1305.e allow remote attackers to gain privileges via unspecified NS Web GUI commands.
Original NVD description (English source)
A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before build 135.18, 10.5 before build 66.9, 10.5e before build 60.7010.e, 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13 (except for build 41.24) that, if exploited, could allow an attacker with access to the NetScaler management interface to gain administrative access to the appliance.