PT-2014-7801 · Citrix · Citrix Netscaler Application Delivery Controller+1

Published 2014-10-21 · Updated 2015-11-25 · CVE-2014-7140

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway versions 10.0 through 10.1-129.10 Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway versions 10.5 before 10.5-50.10

Description The issue is related to an unspecified vulnerability in the management interface of the affected software, allowing remote attackers to execute arbitrary code.

Recommendations For versions 10.0 through 10.1-129.10, update to version 10.1-129.11 or later. For versions 10.5 before 10.5-50.10, update to version 10.5-50.10 or later.

Exploit

Fix

Related Identifiers

CVE-2014-7140

Affected Products

Citrix Netscaler Application Delivery Controller

Netscaler Gateway

References · 4

• 🔥 https://exploit-db.com/exploits/35180 · Exploit
• http://support.citrix.com/article/CTX200206 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-7140 · Security Note
• http://securitytracker.com/id/1031129 · Note