Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

CVE-2024-12284

🗓️ 19 Feb 2025 23:30:11Reported by CitrixType 
cve
 cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 75 Views

Authenticated privilege escalation in NetScaler Console and Agent discovered in CVE-2024-12284.

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
attackerkb
ATTACKERKB		CVE-2024-12284
20 Feb 202500:15
–attackerkb
bdu_fstec
BDU FSTEC		The vulnerability of the NetScaler Console application delivery management service and the NetScaler Agent, related to insecure privilege management, allows attackers to escalate their privileges.
24 Feb 202500:00
–bdu_fstec
circl
Circl		CVE-2024-12284
20 Feb 202502:16
–circl
nessus
Tenable Nessus		Citrix NetScaler Console (ADM) 13.1.x < 13.0.56.18 / 14.1.x < 14.1.38.53 Authenticated privilege escalation Vulnerability (CTX692579)
21 Feb 202500:00
–nessus
cnnvd
CNNVD		Citrix Systems NetScaler Console和NetScaler Agent 安全漏洞
19 Feb 202500:00
–cnnvd
citrix
Citrix		NetScaler Console and NetScaler Agent Security Bulletin for CVE-2024-12284
18 Feb 202507:15
–citrix
cvelist
Cvelist		CVE-2024-12284 Authenticated privilege escalation
19 Feb 202523:30
–cvelist
euvd
EUVD		EUVD-2025-4641
3 Oct 202520:07
–euvd
nvd
NVD		CVE-2024-12284
20 Feb 202500:15
–nvd
osv
OSV		CVE-2024-12284
20 Feb 202500:15
–osv
Rows per page
NVD
Node
OR
citrixnetscaler_agentRange13.1-4.43–13.1-56.18-
citrixnetscaler_agentRange14.1-4.42–14.1-38.53-
citrixnetscaler_agentMatch13.0-58.30-
citrixnetscaler_consoleMatch13.1build12.50
citrixnetscaler_consoleMatch13.1build17.42
citrixnetscaler_consoleMatch13.1build21.53
citrixnetscaler_consoleMatch13.1build24.38
citrixnetscaler_consoleMatch13.1build27.62
citrixnetscaler_consoleMatch13.1build30.52
citrixnetscaler_consoleMatch13.1build33.50
citrixnetscaler_consoleMatch13.1build37.38
citrixnetscaler_consoleMatch13.1build4.43
citrixnetscaler_consoleMatch13.1build42.47
citrixnetscaler_consoleMatch13.1build45.61
citrixnetscaler_consoleMatch13.1build48.47
citrixnetscaler_consoleMatch13.1build49.13
citrixnetscaler_consoleMatch13.1build50.23
citrixnetscaler_consoleMatch13.1build51.14
citrixnetscaler_consoleMatch13.1build52.19
citrixnetscaler_consoleMatch13.1build53.22
citrixnetscaler_consoleMatch13.1build53.24
citrixnetscaler_consoleMatch13.1build54.29
citrixnetscaler_consoleMatch13.1build55.29
citrixnetscaler_consoleMatch14.1build12.34
citrixnetscaler_consoleMatch14.1build17.38
citrixnetscaler_consoleMatch14.1build21.60
citrixnetscaler_consoleMatch14.1build25.53
citrixnetscaler_consoleMatch14.1build25.56
citrixnetscaler_consoleMatch14.1build29.63
citrixnetscaler_consoleMatch14.1build34.43
[
  {
    "defaultStatus": "unaffected",
    "product": "Console",
    "vendor": "NetScaler",
    "versions": [
      {
        "lessThan": "38.53",
        "status": "affected",
        "version": "14.1",
        "versionType": "patch"
      },
      {
        "lessThan": "56.18",
        "status": "affected",
        "version": "13.1",
        "versionType": "patch"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Agent",
    "vendor": "NetScaler",
    "versions": [
      {
        "lessThan": "38.53",
        "status": "affected",
        "version": "14.1",
        "versionType": "patch"
      },
      {
        "lessThan": "56.18",
        "status": "affected",
        "version": "13.1",
        "versionType": "patch"
      }
    ]
  }
]

MauriceTorres

🚨PatchTuesdayAlert:March2025

syedaquib77

Vulnerability Alert: NetScaler Console Privilege Escalation Vulnerability Timeline: Disclosure: 2025-02-20, Patch: 2025-02-20 Attribution: cveId: CVE-2024-12284 baseScore: 8.8 cvssMetrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H cvssSeverity: High exploitMaturity: Not Available affectedVersions: - NetScaler Console 14.1 before 14.1-38.53 - NetScaler Console 13.1 before 13.1-56.18 - NetScaler Agent 14.1 before 14.1-38.53 - NetScaler Agent 13.1 before 13.1-56.18 fixedVersions: - NetScaler Console 14.1-38.53 and later releases - NetScaler Console 13.1-56.18 and later releases of 13.1 - NetScaler Agent 14.1-38.53 and later releases - NetScaler Agent 13.1-56.18 and later releases of 13.1 Summary: Citrix has released security updates for a high-severity security flaw impacting NetScaler Console and NetScaler Agent that could lead to privilege escalation under certain conditions. The vulnerability has been described as a case of improper privilege management that could result in authenticated privilege escalation if the NetScaler Console Agent is deployed and allows an attacker to execute post-compromise actions. Impact Scope: Recommended Actions: Apply patches as per Citrix guidelines to secure affected versions. Related Resources: https://thehackernews.]com/2025/02/citrix-releases-security-fix-for.html https://support.citrix.]com/s/article/CTX692579-netscaler-console-and-netscaler-agent-security-bulletin-for-cve202412284?language=en_US Tags: #Citrix #NetScaler #vulnerability #ITSecurity #privilegeescalation #Cybersecurity

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 06:59Current
7High risk
Vulners AI Score7
CVSS 3.18.8
CVSS 48.8
EPSS0.13301
SSVC
CWE-269
cve-2024-12284privilege escalationnetscaler consolenetscaler agent.
75