CVE-2013-2767

MediumCVSS 5.4/10Last modified Jun 16, 2026

Description

Unspecified vulnerability in Citrix NetScaler Access Gateway Enterprise Edition (AGEE) before 9.3.62.4 and 10.x through 10.0.74.4, and NetScaler AGEE Common Criteria build before 9.3.53.6, allows remote attackers to bypass intended intranet access restrictions via unknown vectors.

Metrics

CVSS 2.0 5.4/10AV:N/AC:H/Au:N/C:C/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://support.citrix.com/article/ctx137238Vendor Advisory
http://www.kb.cert.org/vuls/id/521612US Government Resource
http://support.citrix.com/article/ctx137238Vendor Advisory
http://www.kb.cert.org/vuls/id/521612US Government Resource

Timeline

Published: Apr 25, 2013
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-27705.8The installation functionality in the Novell Kanaka component before 2.8 for Novell Open Enterprise Server (OES) on Mac OS X does not verify CVE-2013-27737.8Nitro PDF 8.5.0.26: A specially crafted DLL file can facilitate Arbitrary Code Execution CVE-2013-27764.4sudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on systems without /proc or the sysctl function with the tty_tickets opt CVE-2013-27774.4sudo before 1.7.10p5 and 1.8.x before 1.8.6p6, when the tty_tickets option is enabled, does not properly validate the controlling terminal d CVE-2013-27787.5Cross-site request forgery (CSRF) vulnerability in addressbook/register/delete_user.php in PHP Address Book 8.2.5 allows remote attackers to CVE-2013-27797.8Cisco IOS XE 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR) does not properly imple CVE-2013-27807.8Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service (defect-mode transition and control outage) via CVE-2013-278110.0Use-after-free vulnerability in the server application in 3S CODESYS Gateway 2.3.9.27 allows remote attackers to cause a denial of service (CVE-2013-27829.3Schneider Electric Trio J-Series License Free Ethernet Radio with firmware 3.6.0 through 3.6.3 uses the same AES encryption key across diffe CVE-2013-27837.1The DNP3 driver in IOServer drivers 1.0.19.0 allows remote attackers to cause a denial of service (infinite loop) or obtain unspecified cont CVE-2013-27847.8Triangle Research International (aka Tri) Nano-10 PLC devices with firmware before r81 use an incorrect algorithm for bounds checking of dat CVE-2013-27859.3Multiple buffer overflows in CimWebServer.exe in the WebView component in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY before 8.0