CVE-2013-6941: Critical severity Citrix Netscaler Application Delivery Controller Firmware vulnerability

Published Mar 10, 2014

Updated

Unspecified vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows users to "breakout" of the shell via unknown vectors.

Affected Software

4 affected components

Citrix Netscaler Application Delivery Controller Firmware=9.3\(1\)

Citrix Netscaler Application Delivery Controller Firmware=9.3.e

Citrix Netscaler Application Delivery Controller Firmware=10.0

Citrix Netscaler Application Delivery Controller Firmware=10.1

Event History

Mar 10, 2014

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Mar 11, 2014

Data Sourced

via NVD·01:00 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2013-6941?

CVE-2013-6941 is classified as a high severity vulnerability due to its potential to allow users to escape the shell.

How do I fix CVE-2013-6941?

To fix CVE-2013-6941, upgrade your Citrix NetScaler Application Delivery Controller firmware to version 9.3-64.4, 10.0-77.5, or 10.1-118.7 or later.

What products are affected by CVE-2013-6941?

CVE-2013-6941 affects Citrix NetScaler Application Delivery Controller firmware versions 9.3.x, 10.0.x, and 10.1.x prior to their respective patched releases.

Can CVE-2013-6941 lead to unauthorized access?

Yes, CVE-2013-6941 can allow unauthorized users to gain elevated privileges by breaking out of the shell.

Is there a known exploit for CVE-2013-6941?

While specific details on the exploit for CVE-2013-6941 are not disclosed, the nature of the vulnerability implies possible exploitation pathways.