What is the CVSS score of CVE-2015-2841?

CVE-2015-2841 has a CVSS 2.0 base score of 5.0 (Medium). CVSS vector: AV:N/AC:L/Au:N/C:N/I:P/A:N. EPSS exploitation probability: 4.4%.

Is there a public PoC exploit available for CVE-2015-2841?

Yes, a public proof-of-concept exploit is available for CVE-2015-2841. Prioritise patching immediately. EPSS: 4.4%.

Netscaler CVE-2015-2841

MEDIUM

Improper Access Control (CWE-284)

2015-04-03 cve@mitre.org

Citrix Authentication Bypass Netscaler

5.0

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

5.0 MEDIUM

AV:N/AC:L/Au:N/C:N/I:P/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:N/I:P/A:N

Attack Vector

Network

Attack Complexity

Low

Confidentiality

None

Integrity

Availability

None

Lifecycle Timeline

CVE Published

Apr 03, 2015 - 14:59 cve.org

MEDIUM 5.0

DescriptionCVE.org

AnalysisAI

Citrix NetScaler AppFirewall, as used in NetScaler 10.5, allows remote attackers to bypass intended firewall restrictions via a crafted Content-Type header, as demonstrated by the. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-284. Citrix NetScaler AppFirewall, as used in NetScaler 10.5, allows remote attackers to bypass intended firewall restrictions via a crafted Content-Type header, as demonstrated by the application/octet-stream and text/xml Content-Types. Affected products include: Citrix Netscaler.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.