High severity · published Sep 26, 2017
CVE-2017-14602
A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before build 135.18, 10.5…
7.2
CVSS
2.4%
EPSS
No
On KEV
Description
A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before build 135.18, 10.5 before build 66.9, 10.5e before build 60.7010.e, 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13 (except for build 41.24) that, if exploited, could allow an attacker with access to the NetScaler management interface to gain administrative access to the appliance.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AD
Application Delivery Controller Firmware · Citrix
10.1; 10.5; 10.5e; 11.0; 11.1; 12.0 · source: NVD
NG
Netscaler Gateway Firmware · Citrix
10.1; 10.5; 10.5e; 11.0; 11.1; 12.0 · source: NVD
Affected product
AD
Application Delivery Controller Firmware
Citrix
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-14602
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-14602
Third Party Advisory
http://www.securityfocus.com/bid/100980
Mitigation
https://support.citrix.com/article/CTX227928
support.citrix.com
https://support.citrix.com/article/CTX228091
More from Application Delivery Controller Firmware
9.8
CVE-2022-27518
Unauthenticated remote arbitrary code execution
9.8
CVE-2019-19781
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability
6.5
CVE-2020-8195
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
6.5
CVE-2020-8193
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability
4.3
CVE-2020-8196
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
