CVE-2013-2601

HIGH 7.5CVE-2013-2601 · Published 12/09/2013 · updated 16/06/2026

In short

CVE-2013-2601 is a HIGH (CVSS 7.5) vulnerability affecting xenclient xt (citrix).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
xenclient xt citrix	`= 3.0.0= 3.1.3≤ 2.1.2`	No fix yet

Description

The NDVM in Citrix XenClient XT before 2.1.3 and 3.x before 3.1.4 allows remote attackers to execute arbitrary commands by using the UIVM to create a network connection.

References

osvdb.org/96749
support.citrix.com/article/CTX138633 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/86967

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free