CVE-2014-2881

2014-05-0117:28:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2014-2881

unspecified vulnerability

diffie-hellman

key agreement

citrix

netscaler

adc

gateway

nvd

security

vulnerability

java applet

6.7 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

64.9%

JSON

Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unknown impact and vectors.

CPENameOperatorVersion
citrix:netscaler_access_gateway_firmwarecitrix netscaler access gateway firmwareeq9.3
citrix:netscaler_application_delivery_controller_firmwarecitrix netscaler application delivery controller firmwareeq10.1
citrix:netscaler_application_delivery_controllercitrix netscaler application delivery controllereq-
citrix:netscaler_access_gateway_firmwarecitrix netscaler access gateway firmwarele10.1.e
citrix:netscaler_application_delivery_controller_firmwarecitrix netscaler application delivery controller firmwarele9.3.e
citrix:netscaler_access_gatewaycitrix netscaler access gatewayeq-

CPE	Name	Operator	Version
citrix:netscaler_access_gateway_firmware	citrix netscaler access gateway firmware	eq	9.3
citrix:netscaler_application_delivery_controller_firmware	citrix netscaler application delivery controller firmware	eq	10.1
citrix:netscaler_application_delivery_controller	citrix netscaler application delivery controller	eq	-
citrix:netscaler_access_gateway_firmware	citrix netscaler access gateway firmware	le	10.1.e
citrix:netscaler_application_delivery_controller_firmware	citrix netscaler application delivery controller firmware	le	9.3.e
citrix:netscaler_access_gateway	citrix netscaler access gateway	eq	-