Remote Code Execution Vulnerability in Citrix NetScaler Application Delivery Controller
CVE-2014-7140

Currently unrated

Key Information:

Vendor: Citrix
Status: Netscaler Application Delivery Controller Firmware
Vendor: CVE Published:; 21 October 2014

Summary

An unspecified vulnerability exists in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway, which permits remote attackers to execute arbitrary code. This issue affects versions of the ADC prior to 10.1-129.11 and the Gateway prior to 10.5-50.10, exposing systems to potential manipulation via unknown vectors. Organizations are encouraged to apply the necessary updates to mitigate these risks.

References

http://support.citrix.com/article/CTX200206

x_refsource_CONFIRM

http://www.securitytracker.com/id/1031129

vdb-entryx_refsource_SECTRACK

EPSS Score

5% chance of being exploited in the next 30 days.

Timeline

Vulnerability published
Oct 21, 2014
Vulnerability Reserved
Sep 22, 2014