Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID cookie. On CloudBridge (the former name of NetScaler SD-WAN) devices, the cookie name was CAKEPHP rather than CGISESSID.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/99943 | Broken Link Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1039019 | Broken Link Third Party Advisory VDB Entry |
| https://support.citrix.com/article/CTX225990 | Permissions Required |
| https://www.exploit-db.com/exploits/42345/ | Exploit Third Party Advisory VDB Entry |
| https://www.exploit-db.com/exploits/42346/ | Third Party Advisory VDB Entry |
| http://www.securityfocus.com/bid/99943 | Broken Link Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1039019 | Broken Link Third Party Advisory VDB Entry |
| https://support.citrix.com/article/CTX225990 | Permissions Required |
| https://www.exploit-db.com/exploits/42345/ | Exploit Third Party Advisory VDB Entry |
| https://www.exploit-db.com/exploits/42346/ | Third Party Advisory VDB Entry |
| https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6316 |
Configurations
History
22 Oct 2025, 00:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
21 Oct 2025, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
21 Oct 2025, 19:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
14 Mar 2025, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://support.citrix.com/article/CTX225990 - Permissions Required |
Information
Published : 2017-07-20 04:29
Updated : 2025-10-22 00:16
NVD link : CVE-2017-6316
Mitre link : CVE-2017-6316
CVE.ORG link : CVE-2017-6316
JSON object : View
Products Affected
citrix
- netscaler_sd-wan
CWE