PT-2018-14321 · Citrix · Citrix Xen Mobile

Glyn Wintle · Published 2018-10-24 · Updated 2024-08-05 · CVE-2018-18014

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Citrix Xen Mobile versions through 10.8

Description The issue allows low-privileged local users to execute system commands as root by making requests to private services listening on ports 8000, 30000, and 30001. The vendor disputes that this is an issue, stating it is already mitigated by the internal firewall that limits access to configuration services to localhost.

Recommendations For Citrix Xen Mobile versions through 10.8, consider restricting access to the private services listening on ports 8000, 30000, and 30001 to minimize the risk of exploitation. As a temporary workaround, limit the ability of low-privileged local users to make requests to these services until a more definitive resolution is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2018-18014

Affected Products

Citrix Xen Mobile

References · 5

• 🔥 https://advisories.dxw.com/advisories/xen-mobile-backing-service-allows-unauthenticated-local-users-to-execute-system-commands-as-root · Exploit
• https://osv.dev/vulnerability/CVE-2018-18014 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-18014 · Security Note
• https://t.me/cvenotify/89189 · Telegram Post
• https://t.me/cvenotify/84551 · Telegram Post