CVE-2017-14602

{"id": "CVE-2017-14602", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "authentication": "SINGLE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "published": "2017-09-26T14:29:00.487", "references": [{"url": "http://www.securityfocus.com/bid/100980", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://support.citrix.com/article/CTX227928", "tags": ["Mitigation", "Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://support.citrix.com/article/CTX228091", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before build 135.18, 10.5 before build 66.9, 10.5e before build 60.7010.e, 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13 (except for build 41.24) that, if exploited, could allow an attacker with access to the NetScaler management interface to gain administrative access to the appliance."}, {"lang": "es", "value": "Se ha identificado una vulnerabilidad en la interfaz de gesti\u00f3n de Citrix NetScaler Application Delivery Controller (ADC) y NetScaler Gateway 10.1 anterior a la build 135.18, 10.5 anterior a la build 66.9, 10.5e anterior a la build 60.7010.e, 11.0 anterior a la build 70.16, 11.1 anterior a la build 55.13 y 12.0 anterior a la build 53.13 (excepto la build 41.24) que, si se explota, podr\u00eda permitir que un atacante con acceso a la interfaz de gesti\u00f3n de NetScaler obtenga acceso administrativo a la aplicaci\u00f3n."}], "lastModified": "2019-10-03T00:03:26.223", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:citrix:application_delivery_controller_firmware:10.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CD06CC6E-DA2E-4F3F-9A35-9108826DE451"}, {"criteria": "cpe:2.3:o:citrix:application_delivery_controller_firmware:10.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D56F2AAF-4658-484C-9A3A-D8A52BA5B10C"}, {"criteria": "cpe:2.3:o:citrix:application_delivery_controller_firmware:10.5e:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8A953CA4-98B4-4881-8674-A5B9B6A427F2"}, {"criteria": "cpe:2.3:o:citrix:application_delivery_controller_firmware:11.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3CE459BE-DA8F-4DFB-B901-5F294C6311F7"}, {"criteria": "cpe:2.3:o:citrix:application_delivery_controller_firmware:11.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8CE9E655-0D97-4DCF-AC2F-79DCD12770E5"}, {"criteria": "cpe:2.3:o:citrix:application_delivery_controller_firmware:12.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "49454F7D-77B5-46DF-B95C-312AF2E68EAD"}, {"criteria": "cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A254925E-AD47-4722-AAB2-43A6FEA900AC"}, {"criteria": "cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E0FA8E2-3E8F-481E-8C39-FB00A9739DFC"}, {"criteria": "cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5e:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4C6A8316-7943-4951-8FB7-A14D0FAB8F3E"}, {"criteria": "cpe:2.3:o:citrix:netscaler_gateway_firmware:11.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2C6F82C-9969-4A6E-88C8-AB8BB0AAD3C7"}, {"criteria": "cpe:2.3:o:citrix:netscaler_gateway_firmware:11.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A5D73B9A-59AA-4A38-AEAF-7EAB0965CD7E"}, {"criteria": "cpe:2.3:o:citrix:netscaler_gateway_firmware:12.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B9F3ED0E-7F3D-477B-B645-77DA5FC7F502"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}