9.8Kritik KEV

CVE-2017-6316Citrix Multiple Products Remote Code Execution Vulnerability

citrix netscaler sd-wan Yayım: 2017-07-20 07:00 (9 yıl önce)

Aktif olarak istismar ediliyor — Citrix Multiple Products Remote Code Execution Vulnerability

CISA bu açığın gerçek saldırılarda kullanıldığını 25.03.2022 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 15.04.2022.

Gerekli işlem: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2017-6316

Açıklama

Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID cookie. On CloudBridge (the former name of NetScaler SD-WAN) devices, the cookie name was CAKEPHP rather than CGISESSID.

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Üretici	Ürün	Sürümler
citrix	netscaler sd-wan	≤ 9.1.2.26.561201

Kaynaklar ve yamalar

1039019 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
https://support.citrix.com/article/CTX225990 Permissions Required
42345 exploitExploitThird Party AdvisoryVDB Entry
99943 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
42346 exploitThird Party AdvisoryVDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6316 US Government Resource

CPE eşleşmeleri (NVD) (1)

cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:* ≤ 9.1.2.26.561201

CVSS puanı

9.8Kritik

Kaynak: CISA-ADP · CVSS 3.1

Saldırı yolu: Ağ
Karmaşıklık: Düşük
Gereken yetki: Yok
Kullanıcı etkileşimi: Gerekmez
Kapsam: Değişmez
Gizlilik: Yüksek
Bütünlük: Yüksek
Erişilebilirlik: Yüksek

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tüm puanlar (4)

CISA-ADP	CVSS 3.1	9.8Kritik
nvd	CVSS 3.1	9.8Kritik
134c704f-9b21-4f2e-91b3-4a467353bcc0	CVSS 3.1	9.8Kritik
nvd	CVSS 2.0	10.0Yüksek

EPSS (30 günde istismar olasılığı)

73.03%

tüm CVE'lerin %99'inden yüksek

CISA değerlendirmesi (SSVC)

İstismar: active
Otomatikleştirilebilir: yes
Teknik etki: total

Zaman çizelgesi

Numara ayrıldı2017-02-24
Yayımlandı2017-07-20 07:00
IP-DB'ye ulaştı2026-10-24 23:33
KEV'e eklendi2022-03-25
Son güncelleme2026-06-17 04:22

Numarayı veren (CNA): mitre
NVD durumu: Analyzed

Kaynakta görüntüle: CVE.org · NVD

Bu ürünlerde yeni bir açık çıktığında haber alın

E-posta uyarılarını aç

Ücretsiz · üyelikle · istediğiniz an kapatılır

Aynı üründe son açıklar — Citrix NetScaler ADC / Gateway

9.5Kritik

CVE-2026-107406 29 gün önce

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

NetScaler ADC; NetScaler Gateway

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements: …

1.9%EPSS

8.7Yüksek

CVE-2026-88779 KEV 1 ay önce

Memory overflow vulnerability leading to Denial of Service

NetScaler ADC; NetScaler Gateway

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.

11%EPSS

8.8Yüksek

CVE-2026-88778 1 ay önce

TCP Initial Sequence Number (ISN) prediction

Citrix NetScaler ADC; Citrix NetScaler Gateway

Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1…

8.8Yüksek

CVE-2026-88777 1 ay önce

Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

Citrix NetScaler ADC; Citrix NetScaler Gateway

Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and befo…

8.8Yüksek

CVE-2026-88776 1 ay önce

Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

Citrix NetScaler ADC; Citrix NetScaler Gateway

8.8Yüksek

CVE-2026-88775 1 ay önce

Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

Citrix NetScaler ADC; Citrix NetScaler Gateway

Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 …