Unscored severity · published May 23, 2014
CVE-2013-2757
Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C does not properly restrict access to VNC ports on the management network, which allows remote…
–
CVSS
2.7%
EPSS
No
On KEV
Description
Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C does not properly restrict access to VNC ports on the management network, which allows remote attackers to have unspecified impact via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.7% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CL
Cloudplatform · Citrix
3.0; 3.0.3; 3.0.4; 3.0.5; 3.0.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-2757
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-2757
osvdb.org
http://osvdb.org/92746
secunia.com
http://secunia.com/advisories/53204
Patch
http://support.citrix.com/article/CTX135815
www.securityfocus.com
http://www.securityfocus.com/bid/59467
www.securitytracker.com
http://www.securitytracker.com/id/1028473
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/83783
More from Cloudplatform
–
CVE-2013-2758
Apache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C uses a hash of a predictable sequence, which makes it easier…
–
CVE-2013-2756
Apache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C allows remote attackers to bypass the console proxy…
–
CVE-2012-5616
Apache CloudStack 4.0.0-incubating and Citrix CloudPlatform (formerly Citrix CloudStack) before 3.0.6 stores sensitive information in the log4j.conf log file, which allows local…