CVE-2013-2601: Citrix Xenclient Xt

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

The NDVM in Citrix XenClient XT before 2.1.3 and 3.x before 3.1.4 allows remote attackers to execute arbitrary commands by using the UIVM to create a network connection.

Affected products

• Citrix Xenclient Xt: up to and including 2.1.2; version 3.0.0 only; version 3.1.3 only

Published 2013-09-12. Last modified 2026-06-16.