NetScaler Console and NetScaler SDX (SVM) - Arbitrary file read
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.9epss 8.3%
exploitation probability
8.3%top 6% of all CVEs
observed exploitation
nono source reports it
In short
A vulnerability in NetScaler Console and NetScaler SDX allows attackers to read any file on the system without proper authorization. This could expose sensitive configuration files, credentials, and other confidential data.
Technical detail
CWE-1284 (Improper Validation of Specified Quantity in Input) enables arbitrary file read via insufficient input validation in NetScaler Console and SDX (SVM). The attack requires network access to the affected service; successful exploitation exposes sensitive files and system information accessible to the application context.
Summary generated and translated by AI from the official description.
Arbitrary file read in NetScaler Console and NetScaler SDX (SVM)
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N