CVEvulnerability

CVE-2017-14602

7.2 HIGH Published 2017-09-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-09-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.2 HIGH — CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-287

Description

A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before build 135.18, 10.5 before build 66.9, 10.5e before build 60.7010.e, 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13 (except for build 41.24) that, if exploited, could allow an attacker with access to the NetScaler management interface to gain administrative access to the appliance.

Affected configurations

• citrix application delivery controller firmware 10.1 • citrix application delivery controller firmware 10.5 • citrix application delivery controller firmware 10.5e • citrix application delivery controller firmware 11.0 • citrix application delivery controller firmware 11.1 • citrix application delivery controller firmware 12.0 • citrix netscaler gateway firmware 10.1 • citrix netscaler gateway firmware 10.5 • citrix netscaler gateway firmware 10.5e • citrix netscaler gateway firmware 11.0 • citrix netscaler gateway firmware 11.1 • citrix netscaler gateway firmware 12.0

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References