MSRXVulnerabilities / CVE-2018-5314
CVE-2018-5314
Published 2018-03-01 · Modified
CVE-2018-5314
7.5 HIGH
CVSS 3.0 · NVD
CVSS 3.0 · NVD
2.8%
chance of exploitation in the next 30 days (EPSS; higher than 86% of CVEs)
chance of exploitation in the next 30 days (EPSS; higher than 86% of CVEs)
Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13; and the NetScaler Load Balancing instance distributed with NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN Optimization Edition 9.3.0 allows remote attackers to execute a system command or read arbitrary files via an SSH login prompt.
Affected products
- citrix netscaler application delivery controller: 11.0; 11.1; 12.0
- citrix netscaler gateway: 11.0; 11.1; 12.0
- citrix netscaler sd-wan: 9.3.0
Weakness: CWE-287
3 references (advisories, patches, write-ups)
- http://www.securityfocus.com/bid/103186 · Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040439 · Third Party Advisory, VDB Entry
- https://support.citrix.com/article/CTX232199 · Vendor Advisory
Sources: NVD, CVE.org, FIRST EPSS. Missing ones did not answer or have no record yet.