CVE-2015-3642
Estado: ModificadaMedia (5.9)—
The TLS and DTLS processing functionality in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway devices with firmware 9.x before 9.3 Build 68.5, 10.0 through Build 78.6, 10.1 before Build 130.13, 10.1.e before Build 130.1302.e, 10.5 before Build 55.8, and 10.5.e before Build 55.8007.e makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE).
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- Puntuación base: 5.9
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.85%
- Percentil entre todas las CVEs puntuadas: 57
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- CWE-200
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2015-3642",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 5.9,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 2.2
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2017-08-02T19:29:00.477",
"references": [
{
"url": "http://support.citrix.com/article/CTX200378",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://support.citrix.com/article/CTX200378",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The TLS and DTLS processing functionality in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway devices with firmware 9.x before 9.3 Build 68.5, 10.0 through Build 78.6, 10.1 before Build 130.13, 10.1.e before Build 130.1302.e, 10.5 before Build 55.8, and 10.5.e before Build 55.8007.e makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE)."
},
{
"lang": "es",
"value": "Las funcionalidades de procesamiento TLS y DTLS en dispositivos Citrix NetScaler Application Delivery Controller (ADC) y NetScaler Gateway con versiones de firmware 9.x anteriores a 9.3 Build 68.5, 10.0 en su versión Build 78.6, 10.1 anterior a Build 130.13, 10.1.e anterior a Build 130.1302.e, 10.5 anterior a Build 55.8, y 10.5.e anterior a Build 55.8007.e hacen que sea más fácil que atacantes que realizan Man-in-the-middle obtengan datos en texto plano mediante un ataque padding-oracle, variante de CVE-2014-3566, también conocido como POODLE."
}
],
"lastModified": "2026-06-17T00:26:01.867",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:citrix:netscaler_firmware:9.0:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "77E759CD-4DF3-4B30-ADFD-9E63F753DFC1"
},
{
"criteria": "cpe:2.3:o:citrix:netscaler_firmware:9.1:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9CC7D1B6-5C2D-4407-A55C-78FE6B899B46"
},
{
"criteria": "cpe:2.3:o:citrix:netscaler_firmware:9.2:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2391E6E2-5E57-4E35-8F2C-89813F999F1F"
},
{
"criteria": "cpe:2.3:o:citrix:netscaler_firmware:10.0:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "61D94767-47A9-4516-BB4F-7800301214EB"
},
{
"criteria": "cpe:2.3:o:citrix:netscaler_firmware:10.1:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "99708F67-F4F1-4651-88FB-97869B9704C0"
},
{
"criteria": "cpe:2.3:o:citrix:netscaler_firmware:10.1e:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6ABD1DF6-BE2F-4A23-ACD4-C33CFF68CB36"
},
{
"criteria": "cpe:2.3:o:citrix:netscaler_firmware:10.5:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F0F108EA-A307-46FE-A093-5EF78182BC2A"
},
{
"criteria": "cpe:2.3:o:citrix:netscaler_firmware:10.5e:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "208B0DD8-6635-4201-B565-FDA647F9F2E3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:citrix:netscaler_application_delivery_controller:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "81FD5100-3ADB-4C21-BCE5-CDA7C4C1D8B9"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:citrix:netscaler_firmware:9.0:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "77E759CD-4DF3-4B30-ADFD-9E63F753DFC1"
},
{
"criteria": "cpe:2.3:o:citrix:netscaler_firmware:9.1:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9CC7D1B6-5C2D-4407-A55C-78FE6B899B46"
},
{
"criteria": "cpe:2.3:o:citrix:netscaler_firmware:9.2:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2391E6E2-5E57-4E35-8F2C-89813F999F1F"
},
{
"criteria": "cpe:2.3:o:citrix:netscaler_firmware:10.0:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "61D94767-47A9-4516-BB4F-7800301214EB"
},
{
"criteria": "cpe:2.3:o:citrix:netscaler_firmware:10.1:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "99708F67-F4F1-4651-88FB-97869B9704C0"
},
{
"criteria": "cpe:2.3:o:citrix:netscaler_firmware:10.1e:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6ABD1DF6-BE2F-4A23-ACD4-C33CFF68CB36"
},
{
"criteria": "cpe:2.3:o:citrix:netscaler_firmware:10.5:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F0F108EA-A307-46FE-A093-5EF78182BC2A"
},
{
"criteria": "cpe:2.3:o:citrix:netscaler_firmware:10.5e:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "208B0DD8-6635-4201-B565-FDA647F9F2E3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:citrix:netscaler_gateway:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DEBB9B6A-1CAD-4D82-9B1E-939921986053"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cve@mitre.org"
}