CVE-2017-6316

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

Citrix NetScaler SD-WAN appliances through version 9.1.2.26.561201 contain a remote command execution flaw that permits unauthenticated attackers to run arbitrary shell commands as root by supplying a crafted CGISESSID cookie; the same issue previously affected CloudBridge devices under the cookie name CAKEPHP. The vulnerability received a CVSS v3 score of 9.8, reflecting network attack vector, low complexity, and no required privileges or user interaction.

An attacker with network access to the management interface can therefore achieve full system compromise simply by sending a malicious cookie value, bypassing all authentication controls and obtaining a root shell on the device.

Citrix addressed the issue in security bulletin CTX225990, while public exploit code has been published on Exploit-DB. The flaw affects the web management component and requires no special configuration beyond the default cookie handling present in the listed firmware versions.