CVE-2014-2881 Weak cryptography in n/a

Critical 10.0 Published Updated

Unspecified vulnerability in Citrix NetScaler ADC and Gateway management GUI Java applet Diffie-Hellman implementation with unknown impact.

Exploited in the wild
Not known
Login needed
Not stated
Attackable
Over the internet
Victim action needed
Not stated
Fix
None listed

What is CVE-2014-2881?

CVE-2014-2881 is a critical vulnerability in n/a, published on 1 May 2014. It can be exploited over the network.

Official description

Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unknown impact and vectors.

Which versions are affected by CVE-2014-2881?

It affects 4 products.

Products include Citrix Netscaler Access Gateway, Citrix Netscaler Access Gateway Firmware, Citrix NetScaler ADC, Citrix Netscaler Application Delivery Controller Firmware.

How do I fix CVE-2014-2881?

No fix has been published for CVE-2014-2881 yet. Limit exposure of the affected software until one is available.

Is CVE-2014-2881 being exploited?

There is no known exploitation of CVE-2014-2881 in the wild and no public exploit code.

Sources

Also known as GHSA-93qw-rcf2-vw95.

Is CVE-2014-2881 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free