What’s Vulnerable › Vulnerabilities

CVE-2017-5933

• Severity: medium (CVSS 5.9 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-02-08 · updated 2026-06-17
• Weakness: CWE-200

Description

Citrix NetScaler ADC and NetScaler Gateway 10.5 before Build 65.11, 11.0 before Build 69.12/69.123, and 11.1 before Build 51.21 randomly generates GCM nonces, which makes it marginally easier for remote attackers to obtain the GCM authentication key and spoof data by leveraging a reused nonce in a session and a "forbidden attack," a similar issue to CVE-2016-0270.

Affected products

• Citrix Netscaler Application Delivery Controller Firmware: through 10.5.65.11; through 11.0.69.12; through 11.1.51.21

References

• http://www.securityfocus.com/bid/96151
• https://github.com/nonce-disrespect/nonce-disrespect
• https://support.citrix.com/article/CTX220329
• http://www.securityfocus.com/bid/96151
• https://github.com/nonce-disrespect/nonce-disrespect
• https://support.citrix.com/article/CTX220329

Get alerted when CVE-2017-5933 or the next vulnerability affects your stack