cvedb.io
CVE-2018-5314
HIGH · CVSS 7.5
EPSS exploitation probability: 0%
Published 2018-03-01T17:29:00.477 · Last modified 2026-06-17T02:00:01.663

Summary

Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13; and the NetScaler Load Balancing instance distributed with NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN Optimization Edition 9.3.0 allows remote attackers to execute a system command or read arbitrary files via an SSH login prompt.

Affected products

citrix — netscaler_application_delivery_controller

Does this affect you?

Add your gear to cvedb and we'll alert you only when citrix ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.