CVE-2010-4566: citrix access_gateway
Vulnerability summary
CVE-2010-4566 is a high (CVSS 9.3) vulnerability in citrix access_gateway. EPSS estimates a 27.79% chance of exploitation in the next 30 days, higher than 98% of scored vulnerabilities. 3 public exploits are recorded.
Timeline
- 14-01-2011PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and earlier, and the NTLM authentication component in Access Gateway Standard and Advanced Editions before Access Gateway 5.0, allows attackers to execute arbitrary commands via shell metacharacters in the password field.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
27.79%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 27.79% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundCitrix Access Gateway - Command Execution (Metasploit)
Maturity: weaponized
Citrix Access Gateway - Command Injection
Maturity: weaponized
Citrix Access Gateway Command Execution
exploit/unix/webapp/citrix_access_gateway_exec
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Citrix1 product
- access_gateway≤ 9.2-49.8 | .8.0:m50.3 | 8.0:m48.7 | 8.0:m49.2 | 8.0:m59.1 | 8.1-69.4 | 9.0.71.3 | 9.1-104.5 | 4.5 | 4.5:hf1 | 4.5.5 | 4.5.6 | 4.5.7 | 4.6.1 | 4.6.2 | 4.6.3
1 vendor · 1 product
References
6 links- www.vsecurity.com/resources/advisory/20101221-1X Refsource MISC