7.5

CVE-2018-5314

EPSS 2.85%
Veröffentlicht 01.03.2018 17:29:00
Zuletzt bearbeitet 21.11.2024 04:08:34
Erkennungen
Login

Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13; and the NetScaler Load Balancing instance distributed with NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN Optimization Edition 9.3.0 allows remote attackers to execute a system command or read arbitrary files via an SSH login prompt.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

NVD 7 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Citrix ≫ Netscaler Application Delivery Controller Version 11.0

Citrix ≫ Netscaler Application Delivery Controller Version 11.1

Citrix ≫ Netscaler Application Delivery Controller Version 12.0

Citrix ≫ NetScaler Gateway Version 11.0

Citrix ≫ NetScaler Gateway Version 11.1

Citrix ≫ NetScaler Gateway Version 12.0

Citrix ≫ Netscaler Sd-wan Version 9.3.0 SwEdition wan_optimization

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.85%	0.85

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://www.securityfocus.com/bid/103186

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1040439

Third Party Advisory

VDB Entry

https://support.citrix.com/article/CTX232199

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-5314

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-5314

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-5314

EUVD