Lucene search
HistoryMay 23, 2014 - 2:55 p.m.
CVE-2013-2757
citrix
cloudplatform
cloudstack
cve-2013-2757
vnc ports
access restriction
security vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.014 Low
EPSS
Percentile
86.5%
Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C does not properly restrict access to VNC ports on the management network, which allows remote attackers to have unspecified impact via unknown vectors.
Affected configurations
Node
citrixcloudplatformMatch3.0
ORcitrixcloudplatformMatch3.0.3
ORcitrixcloudplatformMatch3.0.4
ORcitrixcloudplatformMatch3.0.5
ORcitrixcloudplatformMatch3.0.6
Related
prion
prion
Code injection
2014-05-23 14:55:00
nvd
nvd
CVE-2013-2757
2014-05-23 14:55:10
cvelist
cvelist
CVE-2013-2757
2014-05-23 14:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.014 Low
EPSS
Percentile
86.5%
Related for CVE-2013-2757