CVE-2014-7140

2014-10-2114:55:04

[email protected]

web.nvd.nist.gov

cve-2014-7140

citrix

netscaler adc

netscaler gateway

remote code execution

vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

Low

0.483 Medium

EPSS

Percentile

97.5%

JSON

Unspecified vulnerability in the management interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.x before 10.1-129.11 and 10.5 before 10.5-50.10 allows remote attackers to execute arbitrary code via unknown vectors.

Affected configurations

NVD

Node

citrixnetscaler_application_delivery_controller_firmwareMatch10.0

citrixnetscaler_application_delivery_controller_firmwareMatch10.1

citrixnetscaler_application_delivery_controller_firmwareMatch10.5

CPENameOperatorVersion
citrix:netscaler_application_delivery_controller_firmwarecitrix netscaler application delivery controller firmwareeq10.0
citrix:netscaler_application_delivery_controller_firmwarecitrix netscaler application delivery controller firmwareeq10.1
citrix:netscaler_application_delivery_controller_firmwarecitrix netscaler application delivery controller firmwareeq10.5

CPE	Name	Operator	Version
citrix:netscaler_application_delivery_controller_firmware	citrix netscaler application delivery controller firmware	eq	10.0
citrix:netscaler_application_delivery_controller_firmware	citrix netscaler application delivery controller firmware	eq	10.1
citrix:netscaler_application_delivery_controller_firmware	citrix netscaler application delivery controller firmware	eq	10.5