CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2017-07-20
Citrix NetScaler SD-WAN (CloudBridge) Cookie Injection Remote Root Code Execution (CVE-2017-6316) Technical Advisory
[Affected Scope] Citrix NetScaler SD-WAN (formerly CloudBridge) devices up to and including version v9.1.2.26.561201
[Impact] Unauthenticated remote attackers can execute arbitrary shell commands with root privileges by injecting malicious payloads into HTTP cookies
[Mitigation] Apply the official vendor security patches immediately and restrict external access to the web management interface