What is the CVSS score of CVE-2014-8580?

CVE-2014-8580 has a CVSS 2.0 base score of 4.9 (Medium). CVSS vector: AV:N/AC:M/Au:S/C:P/I:P/A:N. EPSS exploitation probability: 0.3%.

Is there a patch available for CVE-2014-8580?

Yes, a patch is available for CVE-2014-8580. Update the affected software to the latest version immediately.

Netscaler Application Delivery Controller Firmware CVE-2014-8580

MEDIUM

Permissions, Privileges, and Access Controls (CWE-264)

2014-11-07 cve@mitre.org

Citrix Privilege Escalation Netscaler Application Delivery Controller Firmware Netscaler Gateway Firmware

4.9

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

4.9 MEDIUM

AV:N/AC:M/Au:S/C:P/I:P/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:S/C:P/I:P/A:N

Attack Vector

Network

Attack Complexity

Confidentiality

Integrity

Availability

None

Lifecycle Timeline

CVE Published

Nov 07, 2014 - 19:55 cve.org

MEDIUM 4.9

DescriptionCVE.org

Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5.50.10 before 10.5-52.11, 10.1.122.17 before 10.1-129.11, and 10.1-120.1316.e before 10.1-129.1105.e, when using unspecified configurations, allows remote authenticated users to access "network resources" of other users via unknown vectors.

AnalysisAI

Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5.50.10 before 10.5-52.11, 10.1.122.17 before 10.1-129.11, and 10.1-120.1316.e before 10.1-129.1105.e, when using unspecified. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable.

Technical ContextAI

This vulnerability is classified under CWE-264. Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5.50.10 before 10.5-52.11, 10.1.122.17 before 10.1-129.11, and 10.1-120.1316.e before 10.1-129.1105.e, when using unspecified configurations, allows remote authenticated users to access "network resources" of other users via unknown vectors. Affected products include: Citrix Netscaler Application Delivery Controller Firmware, Citrix Netscaler Gateway Firmware. Version information: before 10.5.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.