Read the docs
TI-2024-11394 Aliases CVE-2024-12284GHSA-4g7p-889h-qvww

Authenticated privilege escalation in Citrix Console

Priority MEDIUM 55CWE-269Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
High
User interaction
None
Attack complexity
High
Attack requirements
None
Impact type
Privilege escalation
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-269.

Summary

Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.13301 96th percentileScored 2026-11-07
Fix Fixed Console (NetScaler): 38.53, 56.18Agent (NetScaler): 38.53, 56.18

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
CitrixConsole14.1 to before 38.53; 13.1 to before 56.1838.53, 56.18Patch availableCNA
CitrixAgent14.1 to before 38.53; 13.1 to before 56.1838.53, 56.18Patch availableCNA
  • Console VendorCitrix Affected 14.1 to before 38.53; 13.1 to before 56.18 Fixed in 38.53, 56.18 Patch available CNA
  • Agent VendorCitrix Affected 14.1 to before 38.53; 13.1 to before 56.18 Fixed in 38.53, 56.18 Patch available CNA

CPE configurations NVD · 29

CPEVersionsRoleVendor
cpe:2.3:a:citrix:netscaler_agent:*:*:*:*:-:*:*:*13.1-4.43 to before 13.1-56.18; 14.1-4.42 to before 14.1-38.53VulnerableCitrix
cpe:2.3:a:citrix:netscaler_agent:13.0-58.30:*:*:*:-:*:*:*13.0-58.30VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build12.50:*:*:*:*:*:*13.1 build12.50VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build17.42:*:*:*:*:*:*13.1 build17.42VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build21.53:*:*:*:*:*:*13.1 build21.53VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build24.38:*:*:*:*:*:*13.1 build24.38VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build27.62:*:*:*:*:*:*13.1 build27.62VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build30.52:*:*:*:*:*:*13.1 build30.52VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build33.50:*:*:*:*:*:*13.1 build33.50VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build37.38:*:*:*:*:*:*13.1 build37.38VulnerableCitrix
  • cpe:2.3:a:citrix:netscaler_agent:*:*:*:*:-:*:*:* Versions 13.1-4.43 to before 13.1-56.18; 14.1-4.42 to before 14.1-38.53 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_agent:13.0-58.30:*:*:*:-:*:*:* Versions 13.0-58.30 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build12.50:*:*:*:*:*:* Versions 13.1 build12.50 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build17.42:*:*:*:*:*:* Versions 13.1 build17.42 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build21.53:*:*:*:*:*:* Versions 13.1 build21.53 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build24.38:*:*:*:*:*:* Versions 13.1 build24.38 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build27.62:*:*:*:*:*:* Versions 13.1 build27.62 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build30.52:*:*:*:*:*:* Versions 13.1 build30.52 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build33.50:*:*:*:*:*:* Versions 13.1 build33.50 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build37.38:*:*:*:*:*:* Versions 13.1 build37.38 Vulnerable ·Citrix
Show 19 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:citrix:netscaler_console:13.1:build4.43:*:*:*:*:*:*13.1 build4.43VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build42.47:*:*:*:*:*:*13.1 build42.47VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build45.61:*:*:*:*:*:*13.1 build45.61VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build48.47:*:*:*:*:*:*13.1 build48.47VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build49.13:*:*:*:*:*:*13.1 build49.13VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build50.23:*:*:*:*:*:*13.1 build50.23VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build51.14:*:*:*:*:*:*13.1 build51.14VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build52.19:*:*:*:*:*:*13.1 build52.19VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build53.22:*:*:*:*:*:*13.1 build53.22VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build53.24:*:*:*:*:*:*13.1 build53.24VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build54.29:*:*:*:*:*:*13.1 build54.29VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:13.1:build55.29:*:*:*:*:*:*13.1 build55.29VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:14.1:build12.34:*:*:*:*:*:*14.1 build12.34VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:14.1:build17.38:*:*:*:*:*:*14.1 build17.38VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:14.1:build21.60:*:*:*:*:*:*14.1 build21.60VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:14.1:build25.53:*:*:*:*:*:*14.1 build25.53VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:14.1:build25.56:*:*:*:*:*:*14.1 build25.56VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:14.1:build29.63:*:*:*:*:*:*14.1 build29.63VulnerableCitrix
cpe:2.3:a:citrix:netscaler_console:14.1:build34.43:*:*:*:*:*:*14.1 build34.43VulnerableCitrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build4.43:*:*:*:*:*:* Versions 13.1 build4.43 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build42.47:*:*:*:*:*:* Versions 13.1 build42.47 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build45.61:*:*:*:*:*:* Versions 13.1 build45.61 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build48.47:*:*:*:*:*:* Versions 13.1 build48.47 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build49.13:*:*:*:*:*:* Versions 13.1 build49.13 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build50.23:*:*:*:*:*:* Versions 13.1 build50.23 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build51.14:*:*:*:*:*:* Versions 13.1 build51.14 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build52.19:*:*:*:*:*:* Versions 13.1 build52.19 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build53.22:*:*:*:*:*:* Versions 13.1 build53.22 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build53.24:*:*:*:*:*:* Versions 13.1 build53.24 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build54.29:*:*:*:*:*:* Versions 13.1 build54.29 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:13.1:build55.29:*:*:*:*:*:* Versions 13.1 build55.29 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:14.1:build12.34:*:*:*:*:*:* Versions 14.1 build12.34 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:14.1:build17.38:*:*:*:*:*:* Versions 14.1 build17.38 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:14.1:build21.60:*:*:*:*:*:* Versions 14.1 build21.60 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:14.1:build25.53:*:*:*:*:*:* Versions 14.1 build25.53 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:14.1:build25.56:*:*:*:*:*:* Versions 14.1 build25.56 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:14.1:build29.63:*:*:*:*:*:* Versions 14.1 build29.63 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:netscaler_console:14.1:build34.43:*:*:*:*:*:* Versions 14.1 build34.43 Vulnerable ·Citrix

Remediation

  • Fix · CNA Console (NetScaler) Fixed in 38.53, 56.18
  • Fix · CNA Agent (NetScaler) Fixed in 38.53, 56.18

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-12284
  2. 2026-10-03 Alias added: GHSA-4g7p-889h-qvww

References

Advisory 1

  • TI-2024-05783 Denial of service in Citrix NetScaler Console CVSS 4.0HIGH 7.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences