Skip to content

CVE-2017-6316 Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID cookie. On CloudBridge (the former name of NetScaler SD-WAN)...

CriticalCVSS 9.8 EPSS 73.0% CISA KEV added 2022-03-25 · due 2022-04-15 Exploited in the wild
Published
Updated
Exploit status
Exploited in the wild (confirmed)
Sign in for asset impact Search another CVE

Description

Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID cookie. On CloudBridge (the former name of NetScaler SD-WAN) devices, the cookie name was CAKEPHP rather than CGISESSID.

CISA Known Exploited Vulnerability

Date added
2022-03-25
Due date (FCEB)
2022-04-15
Ransomware use
Unknown

Required action

Apply updates per vendor instructions.

Affected products

ProductAffected versionsFixed in
citrix netscaler sd-wan <= 9.1.2.26.561201 No fix listed

References

  • 99943 broken-link third-party-advisory vdb-entry
  • 1039019 broken-link third-party-advisory vdb-entry
  • support.citrix.com permissions-required
  • 42345 exploit third-party-advisory vdb-entry
  • 42346 exploit third-party-advisory vdb-entry
  • www.cisa.gov government-resource us-government-resource