CVE-2018-18014

MEDIUM

Citrix XenMobile Server < 10.8.0 - Unauthenticated Remote Code Execution via Private Service Ports

Title source: llm

Description

* Lack of authentication in Citrix Xen Mobile through 10.8 allows low-privileged local users to execute system commands as root by making requests to private services listening on ports 8000, 30000 and 30001. NOTE: the vendor disputes that this is a vulnerability, stating it is "already mitigated by the internal firewall that limits access to configuration services to localhost.

References (1)

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

https://advisories.dxw.com/advisories/xen-mobile-backing-service-allows-unauthenticated-local-users-to-execute-system-commands-as-root/

Scores

CVSS v3 4.8

EPSS 0.0004

EPSS Percentile 11.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-287

Status published

Products (1)

citrix/xenmobile_server < 10.8.0

Published Oct 24, 2018

Tracked Since Feb 18, 2026