CVE-2018-5314

Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13…

published March 1, 2018

CVSS
—
EPSS
3%
Percentile
86.5
In the wild
Unconfirmed
What it is

Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13; and the NetScaler Load Balancing instance distributed with NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN Optimization Edition 9.3.0 allows remote attackers to execute a system command or read arbitrary files via an SSH login prompt.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02849 · 86.5th percentile
Published
2018-03-01T17:00Z
EPSS history
Timeline
  • 01 MAR 17:00Z
    Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13…
    cvelistv5