high8.8
CVE-2021-44520
In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Command Injection vulnerability, leading to remote code execution with root privileges.
Impact
In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Command Injection vulnerability, leading to remote code execution with root privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Citrix | Xenmobile Server | Versions 10.13.0, 10.14.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://docs.citrix.com/en-us/xenmobile/server/document-history.html
- https://gist.github.com/tree-chtsec/766f81e22ae383987d75eedb3b23b709
- https://support.citrix.com/article/CTX370551
- https://www.chtsecurity.com/news/09be10ae-b50e-46c9-8ce7-2e995fd988fe
- https://docs.citrix.com/en-us/xenmobile/server/document-history.html
- https://gist.github.com/tree-chtsec/766f81e22ae383987d75eedb3b23b709
- https://support.citrix.com/article/CTX370551
- https://www.chtsecurity.com/news/09be10ae-b50e-46c9-8ce7-2e995fd988fe