CVE-2013-2757
published 2014-05-23CVE-2013-2757: Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C does not properly restrict access to VNC ports on the management network, which…
PriorityP341high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
2.67%
84.0th percentile
Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C does not properly restrict access to VNC ports on the management network, which allows remote attackers to have unspecified impact via unknown vectors.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| citrix | citrix_adm | — | — |
| citrix | citrix_hypervisor | — | — |
| citrix | citrix_virtual_apps_and_desktops | — | — |
| citrix | cloudplatform | — | — |
| citrix | cloudplatform | — | — |
| citrix | cloudplatform | — | — |
| citrix | cloudplatform | — | — |
| citrix | cloudplatform | — | — |
| citrix | endpoint_management | — | — |
| citrix | netscaler_adc | — | — |
| citrix | netscaler_gateway | — | — |
| citrix | xenserver | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Citrix
CVE-2013-2757: Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C does not properly restrict access to VNC ports on the management network,
vendor_citrix·2014-05-23·CVSS 7.5
CVE-2013-2757 [HIGH] CWE-264 CVE-2013-2757: Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C does not properly restrict access to VNC ports on the management network,
CVE-2013-2757: Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C does not properly restrict access to VNC ports on the management network, which allows remote attackers to have unspecified impact via unknown vectors.
Citrix
Citrix Security Bulletin CTX135815
vendor_citrix·CVSS 5.0
CVE-2013-2756 [MEDIUM] Citrix Security Bulletin CTX135815
Citrix Security Bulletin CTX135815
CVE References: CVE-2013-2756, CVE-2013-2757, CVE-2013-2758, CVE-2025-12101, CVE-2025-62626, CVE-2026-23554, CVE-2026-3055, CVE-2026-4368, CVE-2026-4397
Affected Products: Citrix ADM, Citrix Hypervisor, Citrix Virtual Apps and Desktops, Endpoint Management, NetScaler ADC, NetScaler Gateway, XenServer
GHSA
GHSA-6mmc-w668-v37v: Citrix CloudPlatform (formerly Citrix CloudStack) 3
ghsa_unreviewed·2022-05-17
CVE-2013-2757 [HIGH] GHSA-6mmc-w668-v37v: Citrix CloudPlatform (formerly Citrix CloudStack) 3
Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C does not properly restrict access to VNC ports on the management network, which allows remote attackers to have unspecified impact via unknown vectors.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://osvdb.org/92746http://secunia.com/advisories/53204http://support.citrix.com/article/CTX135815http://www.securityfocus.com/bid/59467http://www.securitytracker.com/id/1028473https://exchange.xforce.ibmcloud.com/vulnerabilities/83783http://osvdb.org/92746http://secunia.com/advisories/53204http://support.citrix.com/article/CTX135815http://www.securityfocus.com/bid/59467http://www.securitytracker.com/id/1028473https://exchange.xforce.ibmcloud.com/vulnerabilities/83783
2014-05-23
Published