Unscored severity · published Jul 16, 2015
CVE-2015-5080
The Management Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before 10.1.132.8, 10.5 before Build 56.15, and 10.5.e before Build…
–
CVSS
3.9%
EPSS
No
On KEV
Description
The Management Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before 10.1.132.8, 10.5 before Build 56.15, and 10.5.e before Build 56.1505.e allows remote authenticated users to execute arbitrary shell commands via shell metacharacters in the filter parameter to rapi/ipsec_logs.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.9% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NA
Netscaler Application Delivery Controller Firmware · Citrix
10.1; 10.1.120.1316.e; 10.1.121; 10.1.122; 10.1.123; 10.1.124; +7 more · source: NVD
NG
Netscaler Gateway Firmware · Citrix
10.1.120.1316.e; 10.1.121; 10.1.122; 10.1.123; 10.1.124; 10.1.125; +8 more · source: NVD
Affected product
NA
Netscaler Application Delivery Controller Firmware
Citrix
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-5080
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-5080
security-assessment.com
http://security-assessment.com/files/documents/advisory/Citrix-Netscaler-Final.pdf
support.citrix.com
http://support.citrix.com/article/CTX201149
www.securityfocus.com
http://www.securityfocus.com/bid/75505
www.securitytracker.com
http://www.securitytracker.com/id/1032762
More from Netscaler Application Delivery Controller Firmware
9.8
CVE-2018-6809
NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to gain privilege on a target system
8.8
CVE-2016-9028
Unauthorized redirect vulnerability in Citrix NetScaler ADC before 10.1 135.8, 10.5 61.11, 11.0 65.31/65.35F and 11.1 47.14 allows a remote attacker to steal session cookies of a…
7.5
CVE-2019-12044
A Buffer Overflow exists in Citrix NetScaler Gateway 10.5.x before 10.5.70.x, 11.1.x before 11.1.59.10, 12.0.x before 12.0.59.8, and 12.1.x before 12.1.49.23 and Citrix…
7.5
CVE-2018-6810
Directory traversal vulnerability in NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allows remote attackers to traverse the directory…
7.5
CVE-2018-6808
NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to download arbitrary files on the target system