CVE-2013-2601

published 2013-09-12

CVE-2013-2601: The NDVM in Citrix XenClient XT before 2.1.3 and 3.x before 3.1.4 allows remote attackers to execute arbitrary commands by using the UIVM to create a network…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

The NDVM in Citrix XenClient XT before 2.1.3 and 3.x before 3.1.4 allows remote attackers to execute arbitrary commands by using the UIVM to create a network connection.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
citrix	citrix_adm	—	—
citrix	citrix_hypervisor	—	—
citrix	citrix_virtual_apps_and_desktops	—	—
citrix	endpoint_management	—	—
citrix	netscaler_adc	—	—
citrix	netscaler_gateway	—	—
citrix	xenclient_xt	<= 2.1.2	—
citrix	xenclient_xt	—	—
citrix	xenclient_xt	—	—
citrix	xenserver	—	—