Exposures › CVE-2017-6316

CVE-2017-6316

Severity
high · on CISA KEV actively exploited
Source
CISA-KEV · kev
Published
2022-03-25
Reference
⚡ RCE ⌖ exploited in the wild shame 65/100 rceexploited-in-wild

A vulnerability has been identified in the management interface of Citrix NetScaler SD-WAN Enterprise and Standard Edition and Citrix CloudBridge Virtual WAN Edition that could result in an unauthenticated, remote attacker being able to execute arbitrary code as a root user. This

Players implicated

Citrix · vendorNetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server · product

Description

A vulnerability has been identified in the management interface of Citrix NetScaler SD-WAN Enterprise and Standard Edition and Citrix CloudBridge Virtual WAN Edition that could result in an unauthenticated, remote attacker being able to execute arbitrary code as a root user. This vulnerability also affects XenMobile Server.

Affected FedRAMP products 1 in the catalog

ProductProviderStatusMatch
Citrix for Government Citrix Authorized vendor-exact · 0.90