CVE-2017-14602
highPriorität · verfolgen · 30EPSS 0.024 · 84. PerzentilEURUUSEPSS · bewertet 2026-10-25
A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before build 135.18, 10.5 before build 66.9, 10.5e before build 60.7010.e, 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13 (except for build 41.24) that, if exploited, could allow an attacker with access to the NetScaler management interface to gain administrative access to the appliance.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.6–9
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (25)
Betroffene Produkte und Versionsbereiche.
- Citrix Systems Inc. NetScaler Application Delivery Controller10.5e → 10.5e build 60.7010.efstec_bduRU
- Citrix Systems Inc. NetScaler Application Delivery Controller12.0 → 12.0 build 53.13 (кроме build 41.24)fstec_bduRU
- citrix application delivery controller firmware= 10.1nvdUScpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*
- citrix application delivery controller firmware= 10.5nvdUScpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*
- citrix application delivery controller firmware= 10.5envdUScpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*
- citrix application delivery controller firmware= 11.0nvdUScpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*
- citrix application delivery controller firmware= 11.1nvdUScpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*
- citrix application delivery controller firmware= 12.0nvdUScpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*
- citrix netscaler gateway firmware= 10.1nvdUScpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*
auch bekannt als (5)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (10)
Externe Belege — Patches, Meldungen, Analysen.
- https://support.citrix.com/article/CTX227928cnnvd
- https://support.citrix.com/article/CTX228091cnnvd
- https://www.auscert.org.au/bulletins/ESB-2023.1511cnnvd
- https://www.securityfocus.com/bid/100980cnnvd
- http://www.securityfocus.com/bid/100980enisa_euvd
- https://support.citrix.com/article/CTX227928enisa_euvd
- https://support.citrix.com/article/CTX228091enisa_euvd
- http://www.securityfocus.com/bid/100980Third Party AdvisoryVDB Entrynvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan