CVE-2013-2757: High severity Citrix CloudPlatform vulnerability
Published May 23, 2014
·Updated
Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C does not properly restrict access to VNC ports on the management network, which allows remote attackers to have unspecified impact via unknown vectors.
Affected Software
5 affected components
Citrix CloudPlatform=3.0
Citrix CloudPlatform=3.0.3
Citrix CloudPlatform=3.0.4
Citrix CloudPlatform=3.0.5
Citrix CloudPlatform=3.0.6
Remediation
Patch Available
Event History
May 23, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:55 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-2757?
CVE-2013-2757 is classified as a high severity vulnerability due to improper access restrictions on VNC ports.
2
How do I fix CVE-2013-2757?
To fix CVE-2013-2757, upgrade Citrix CloudPlatform to version 3.0.6 Patch C or later.
3
What are the potential impacts of CVE-2013-2757?
CVE-2013-2757 may allow remote attackers to exploit VNC access, potentially leading to unauthorized control or information disclosure.
4
Which versions of Citrix CloudPlatform are affected by CVE-2013-2757?
CVE-2013-2757 affects Citrix CloudPlatform versions 3.0.x before 3.0.6 Patch C.
5
Is there a workaround for CVE-2013-2757 until a patch can be applied?
A possible workaround for CVE-2013-2757 is to restrict access to VNC ports through firewall rules.