FlagThis

Citrix has released a security fix for a high-severity vulnerability, CVE-2024-12284, impacting NetScaler Console and NetScaler Agent. The vulnerability, which stems from improper privilege management, could allow authenticated attackers to execute commands without authorization. The CVSS v4 score for this flaw is 8.8 out of 10.0. Users are urged to update their NetScaler Console and Agent installations immediately to mitigate the risk of unauthorized command execution.

Cloud Software Group strongly recommends that customers running affected versions of on-premises NetScaler Console and NetScaler Agent upgrade to the patched versions. There are no workarounds available; upgrading is the only solution. The affected versions are NetScaler Console and Agent 14.1 before 14.1-38.53 and 13.1 before 13.1-56.18. The remediated versions are NetScaler Console and Agent 14.1-38.53 and later releases, and 13.1-56.18 and later releases of 13.1. Customers using Citrix-managed NetScaler Console Service do not need to take any action.

ImgSrc: securityonline.info

References:

• Vulnerabilities ? The Cyber Express - CVE-2024-12284: NetScaler Users Urged to Update Against Critical Flaw - 1d
• securityonline.info - CVE-2024-12284 in NetScaler Console Exposes Systems to Unauthorized Command Execution - 1d
• The Hacker News - Citrix Releases Security Fix for NetScaler Console Privilege Escalation Vulnerability - 1d
• Security Archives - Security Affairs - Citrix addressed NetScaler console privilege escalation flaw - 1d
• Talkback Resources - Citrix Releases Security Fix for NetScaler Console Privilege Escalation Vulnerability [app] [cloud] - 1d
• Vulnerability Archives ? Cybersecurity News - Cloud Software Group has released a security bulletin addressing a high-severity vulnerability in its NetScaler Console and NetScaler - 1d
• www.heise.de - Citrix Netscaler enables the extension of rights Citrix Netscaler Agent and Netscaler Console allow attackers to extend their rights. Secure Access Client for Mac also has a vulnerability. - 18h

Classification:

• HashTags: NetScaler Vulnerability Citrix
• Company: Cloud Software Group
• Target: NetScaler Console Users
• Product: NetScaler
• Feature: Privilege Escalation
• Type: Vulnerability
• Severity: High