CVE-2023-24487 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	6.3 MEDIUM	ADJACENT_NETWORK	LOW	NONE	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Citrix	CNA	6.3 MEDIUM	ADJACENT_NETWORK	LOW	NONE	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVE	ADP	---				---
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 95%

Vendor	Product	Version
citrix	application_delivery_controller	12.1 ≤ 𝑥 < 12.1-55.296
citrix	application_delivery_controller	12.1 ≤ 𝑥 < 12.1-55.296
citrix	application_delivery_controller	12.1 ≤ 𝑥 < 12.1-65.35
citrix	application_delivery_controller	13.0 ≤ 𝑥 < 13.0-90.11
citrix	application_delivery_controller	13.1 ≤ 𝑥 < 13.1-37.150
citrix	application_delivery_controller	13.1 ≤ 𝑥 < 13.1-45.61
citrix	gateway	12.1 ≤ 𝑥 < 12.1-65.35
citrix	gateway	13.0 ≤ 𝑥 < 13.0-90.11
citrix	gateway	13.1 ≤ 𝑥 < 13.1-45.61

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-253 - Incorrect Check of Function Return Value
The software incorrectly checks a return value from a function, which prevents the software from detecting errors or exceptional conditions.

References

https://support.citrix.com/article/CTX477714/citrix-adc-and-citrix-gateway-security-bulletin-for-cve202324487-cve202324488

https://support.citrix.com/article/CTX477714/citrix-adc-and-citrix-gateway-security-bulletin-for-cve202324487-cve202324488