CVE-2018-5314

Published: Mar 1, 2018Modified: Nov 21, 2024

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13; and the NetScaler Load Balancing instance distributed with NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN Optimization Edition 9.3.0 allows remote attackers to execute a system command or read arbitrary files via an SSH login prompt.

Affected (7)

Products: Citrix: Netscaler Application Delivery Controller, Netscaler Gateway, Netscaler Sd Wan

Citrix

3 products

Netscaler Application Delivery Controller

Netscaler Gateway

Netscaler Sd Wan

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Citrix Netscaler Application Delivery Controller	Version 11.0
Citrix Netscaler Application Delivery Controller	Version 11.1
Citrix Netscaler Application Delivery Controller	Version 12.0
Citrix Netscaler Gateway	Version 11.0
Citrix Netscaler Gateway	Version 11.1
Citrix Netscaler Gateway	Version 12.0
Citrix Netscaler Sd Wan	Version 9.3.0