Code Injection Vulnerability in Citrix NetScaler ADC and NetScaler Gateway

NetScaler ADC is an application delivery controller. NetScaler Gateway is an access gateway with an SSL VPN solution that provides single sign-on and authentication for remote end users of network assets. Both are Citrix products. A code injection vulnerability exists in Citrix NetScaler ADC and NetScaler Gateway, and the vulnerability stems from improper code generation controls in NetScaler ADC and NetScaler Gateway. An attacker with NSIP, CLIP, or SNIP access to the management interface could exploit the vulnerability to perform authenticated (low privilege) remote code execution on the management interface.