CVE-2013-6943: Code Injection

Published Mar 10, 2014

Updated

Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to conduct an LDAP injection attack via vectors related to SSH and Web management usernames.

Affected Software

4 affected components

Citrix Netscaler Application Delivery Controller Firmware=9.3\(1\)

Citrix Netscaler Application Delivery Controller Firmware=9.3.e

Citrix Netscaler Application Delivery Controller Firmware=10.0

Citrix Netscaler Application Delivery Controller Firmware=10.1

Event History

Mar 10, 2014

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Mar 11, 2014

Data Sourced

via NVD·01:00 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2013-6943?

CVE-2013-6943 is rated as High severity due to its potential for exploitation through LDAP injection.

How do I fix CVE-2013-6943?

To mitigate CVE-2013-6943, upgrade to Citrix NetScaler ADC versions 9.3-64.4, 10.0-77.5, or 10.1-118.7 or later.

What systems are affected by CVE-2013-6943?

CVE-2013-6943 affects Citrix NetScaler Application Delivery Controller firmware versions 9.3.x, 10.0, and 10.1 prior to their respective fixed releases.

What type of attack is associated with CVE-2013-6943?

CVE-2013-6943 allows remote attackers to conduct LDAP injection attacks potentially compromising sensitive data.

Is there a workaround for CVE-2013-6943?

While the best solution is to update the firmware, temporarily minimizing SSH and Web management access can help reduce exposure.