CVE-2017-6316
Critical · 9.8 CISA KEVCVSS
9.8
EPSS
73.0%
Published
Jul 20, 2017
CISA due date
Apr 15, 2022
The record
Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID cookie. On CloudBridge (the former name of NetScaler SD-WAN) devices, the cookie name was CAKEPHP rather than CGISESSID.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|