CVE lookup

CVE-2017-6316

Citrix Multiple Products Remote Code Execution Vulnerability

No dossier yet. This CVE is on our watch list.

Dossiers are written only when the selection criteria are met. Until then, use the primary sources below.

Description

A vulnerability has been identified in the management interface of Citrix NetScaler SD-WAN Enterprise and Standard Edition and Citrix CloudBridge Virtual WAN Edition that could result in an unauthenticated, remote attacker being able to execute arbitrary code as a root user. This vulnerability also affects XenMobile Server.

CISA required action: Apply updates per vendor instructions.

Primary sources

  1. NVD - CVE-2017-6316
  2. CISA KEV catalog entry
  3. FIRST EPSS