Lucene search
HistorySep 12, 2013 - 6:37 p.m.
CVE-2013-2601
cve-2013-2601
citrix
xenclient
ndvm
remote attack
arbitrary commands
security vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
79.4%
The NDVM in Citrix XenClient XT before 2.1.3 and 3.x before 3.1.4 allows remote attackers to execute arbitrary commands by using the UIVM to create a network connection.
Affected configurations
Node
citrixxenclient_xtRange≤2.1.2
ORcitrixxenclient_xtMatch3.0.0
ORcitrixxenclient_xtMatch3.1.3
Related
cvelist
cvelist
CVE-2013-2601
2013-09-12 18:00:00
prion
prion
Design/Logic Flaw
2013-09-12 18:37:00
nvd
nvd
CVE-2013-2601
2013-09-12 18:37:42
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
79.4%
Related for CVE-2013-2601