CVE Watch—

CVE-2017-6316

Citrix Multiple Products Remote Code Execution Vulnerability

CVSS

—

No CVSS

EPSS

72.6%

p99

KEV

YES

Mar 25, 2022

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

72.6%EPSS · 30 days72.6%

2026-06-302026-07-16

KEV catalog record

Product

Citrix / NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server

Vulnerability

Citrix Multiple Products Remote Code Execution Vulnerability

Added to KEV

Mar 25, 2022

Remediate by

Apr 15, 2022

Known ransomware use

Summary description

A vulnerability has been identified in the management interface of Citrix NetScaler SD-WAN Enterprise and Standard Edition and Citrix CloudBridge Virtual WAN Edition that could result in an unauthenticated, remote attacker being able to execute arbitrary code as a root user. This vulnerability also affects XenMobile Server.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2017-6316

Related CVEs

No related CVEs by CWE or product.