CVE-2024-8534 - CVE House
Back to Database
Status published High CVE-2024-8534

Memory safety vulnerability leading to memory corruption and Denial of Service

Vulnerability Description

Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be configured as a Gateway (VPN Vserver) with RDP Feature enabled OR the appliance must be configured as a Gateway (VPN Vserver) and RDP Proxy Server Profile is created and set to Gateway (VPN Vserver) OR the appliance must be configured as a Auth Server (AAA Vserver) with RDP Feature enabled

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-8534

Credits & Attribution

No credits recorded in the NVD database.

References

More from NetSclaer

View All →
CVE-2024-6236
Denial of Service
High 7.1
CVE-2024-5492
Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites
Medium 5.1

Affected Vendor

Affected Software

NetScaler ADC, NetScaler Gateway
Vulnerable Versions:
14.1, 13.1, 13.1-FIPS, 12.1-FIPS, 12.1-NDcPP

Timeline

Official Publish: November 12th, 2024
Last Modified: November 21st, 2024
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-119

MITRE ATT&CK TTPs

T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1203 Exploitation for Client Execution
Execution
T1055 Process Injection
Defense Evasion
T1105 Ingress Tool Transfer
Command and Control