CVE-2013-6941 Unspecified vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows users to "breakout" of the shell via...

HighCVSS 10.0 EPSS 1.6%

Published: 2014-03-10 16:00
Updated: 2026-06-17 03:01
Exploit status: No public exploit known

Description

Unspecified vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows users to "breakout" of the shell via unknown vectors.

Affected products

Product	Affected versions	Fixed in
citrix netscaler application delivery controller firmware	= 9.3(1)	No fix listed
citrix netscaler application delivery controller firmware	= 9.3.e	No fix listed
citrix netscaler application delivery controller firmware	= 10.0	No fix listed
citrix netscaler application delivery controller firmware	= 10.1	No fix listed

References

support.citrix.com vendor-advisory

CVSS v2.0

10.0 High

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.65% (percentile 76.9)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.