CVE-2024-12284: Authenticated privilege escalation
Published Feb 19, 2025
·Updated
Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows.
Affected Software
32 affected components
Citrix NetScaler Console
Citrix NetScaler Agent
Citrix NetScaler Agent>=13.1-4.43<13.1-56.18
Citrix NetScaler Agent>=14.1-4.42<14.1-38.53
Citrix NetScaler Agent=13.0-58.30
Citrix NetScaler Console=13.1-build12.50
Citrix NetScaler Console=13.1-build17.42
Citrix NetScaler Console=13.1-build21.53
Citrix NetScaler Console=13.1-build24.38
Citrix NetScaler Console=13.1-build27.62
Citrix NetScaler Console=13.1-build30.52
Citrix NetScaler Console=13.1-build33.50
Citrix NetScaler Console=13.1-build37.38
Citrix NetScaler Console=13.1-build4.43
Citrix NetScaler Console=13.1-build42.47
Citrix NetScaler Console=13.1-build45.61
Citrix NetScaler Console=13.1-build48.47
Citrix NetScaler Console=13.1-build49.13
Citrix NetScaler Console=13.1-build50.23
Citrix NetScaler Console=13.1-build51.14
Citrix NetScaler Console=13.1-build52.19
Citrix NetScaler Console=13.1-build53.22
Citrix NetScaler Console=13.1-build53.24
Citrix NetScaler Console=13.1-build54.29
Citrix NetScaler Console=13.1-build55.29
Citrix NetScaler Console=14.1-build12.34
Citrix NetScaler Console=14.1-build17.38
Citrix NetScaler Console=14.1-build21.60
Citrix NetScaler Console=14.1-build25.53
Citrix NetScaler Console=14.1-build25.56
Citrix NetScaler Console=14.1-build29.63
Citrix NetScaler Console=14.1-build34.43
Event History
Feb 19, 2025
CVE Published
via MITRE·11:30 PM
Data Sourced
via MITRE·11:30 PM
DescriptionWeakness
Feb 20, 2025
Data Sourced
via NVD·12:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-12284?
CVE-2024-12284 has been rated as a critical severity vulnerability due to the potential for authenticated privilege escalation.
2
How do I fix CVE-2024-12284?
To fix CVE-2024-12284, apply the latest security patches from Citrix for the affected versions of NetScaler Console and NetScaler Agent.
3
Who is affected by CVE-2024-12284?
Administrators using vulnerable versions of Citrix NetScaler Console and NetScaler Agent are affected by CVE-2024-12284.
4
What type of vulnerability is CVE-2024-12284?
CVE-2024-12284 is an authenticated privilege escalation vulnerability that allows attackers to gain higher privileges.
5
Is there a workaround for CVE-2024-12284?
Currently, the recommended action for CVE-2024-12284 is to apply the provided security updates, as there are no known effective workarounds.