CVE-2014-2881 — HIGH (10.0)

Vulnerability Description

Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unknown impact and vectors.

CVSS Score

10.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Citrix	Netscaler Access Gateway Firmware	9.3
Citrix	Netscaler Application Delivery Controller Firmware	10.1
Citrix	Netscaler Application Delivery Controller	-
Citrix	Netscaler Access Gateway	-

References

http://support.citrix.com/article/CTX140651Vendor Advisory
http://www.securitytracker.com/id/1030180
http://support.citrix.com/article/CTX140651Vendor Advisory
http://www.securitytracker.com/id/1030180

FAQ

What is CVE-2014-2881?

CVE-2014-2881 is a vulnerability with a CVSS score of 10.0 (HIGH). Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 9....

How severe is CVE-2014-2881?

CVE-2014-2881 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-2881?

Check the references section above for vendor advisories and patch information. Affected products include: Citrix Netscaler Access Gateway Firmware, Citrix Netscaler Application Delivery Controller Firmware, Citrix Netscaler Application Delivery Controller, Citrix Netscaler Access Gateway.