CVE-2017-17382

5.9 mediumEPSS 14%

Medium (5.9) in citrix. EPSS 14% chance of exploitation in the next 30 days.

Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22 might allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack.

Severity

CVSS 3.0

5.9 medium

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 14% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-327
Published: 2017-12-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

citrix:application_delivery_controller_firmware
citrix:netscaler_gateway_firmware

References

http://www.securityfocus.com/bid/102173
http://www.securitytracker.com/id/1039985
https://robotattack.org/
https://support.citrix.com/article/ctx230238
https://www.kb.cert.org/vuls/id/144389

Check your stack JSON