Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Back

CVE-2024-8534Memory safety vulnerability leading to memory corruption and Denial of Service

Description

Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be configured as a Gateway (VPN Vserver) with RDP Feature enabled OR the appliance must be configured as a Gateway (VPN Vserver) and RDP Proxy Server Profile is created and set to Gateway (VPN Vserver) OR the appliance must be configured as a Auth Server (AAA Vserver) with RDP Feature enabled

Timeline

  1. ID reserved

    By Citrix

  2. · 2 months later

    Published

  3. · 9 days later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2024-8534, by who scored it
Scored byCVSSScoreVector
CitrixCNA (assigner)4.0High8.4CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:L
NVDNVD · Analyzed4.0High8.4CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS (exploitation in 30 days)
0.56% · top 53% of all CVEs (12 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: yes · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.4.

Affected products

  • NetSclaer · NetScaler ADC

    • affected 14.1 – < 29.72
    • affected 13.1 – < 55.34
    • affected 13.1-FIPS – < 37.207
    • affected 12.1-FIPS – < 55.321
    • affected 12.1-NDcPP – < 55.321

  • NetScaler · NetScaler Gateway

    • affected 14.1 – < 29.72
    • affected 13.1 – < 55.34
    • affected 13.1-FIPS – < 37.207
    • affected 12.1-FIPS – < 55.321
    • affected 12.1-NDcPP – < 55.321

References

References1

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2024-8534 badge
[![CVE-2024-8534](https://cveledger.app/badge/CVE-2024-8534.svg)](https://cveledger.app/cve/CVE-2024-8534)

Record last updated .