CISA urges urgent patching of two actively exploited Citrix NetScaler vulnerabilities

🗓️ 19 Jan 2024 13:02:11Reported by Malwarebytes blogType

malwarebytes🔗 www.malwarebytes.com👁 34 Views

CISA urges patching of two actively exploited Citrix NetScaler vulnerabilities with specific deadlines for affected agencies. Vulnerabilities involve code injection and memory buffer restriction, impacting certain versions of NetScaler ADC and NetScaler Gateway. Citrix advises affected customers to install relevant updates

Reporter	Title	Published	Views	Family All 38
ATTACKERKB	CVE-2023-6549	17 Jan 202421:15	–	attackerkb
ATTACKERKB	CVE-2023-6548	17 Jan 202420:15	–	attackerkb
BDU FSTEC	The vulnerability of Citrix ADC application delivery controllers (formerly known as Citrix NetScaler Application Delivery Controller) and Citrix Gateway virtual environment access control systems (formerly known as Citrix NetScaler Gateway) relates to an operation that goes beyond the buffer in memory, allowing a malicious actor to cause service failures.	17 Jan 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Citrix ADC application delivery controllers (formerly known as Citrix NetScaler Application Delivery Controller) and Citrix Gateway access control systems (formerly known as Citrix NetScaler Gateway) stems from improper code generation, allowing attackers to execute arbitrary code.	18 Jan 202400:00	–	bdu_fstec
Circl	CVE-2023-6548	17 Jan 202404:00	–	circl
Circl	CVE-2023-6549	17 Jan 202404:00	–	circl
CISA KEV Catalog	Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability	17 Jan 202400:00	–	cisa_kev
CISA KEV Catalog	Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability	17 Jan 202400:00	–	cisa_kev
CISA	CISA Adds Three Known Exploited Vulnerabilities to Catalog	17 Jan 202412:00	–	cisa
CISA	Citrix Releases Security Updates for NetScaler ADC and NetScaler Gateway	18 Jan 202412:00	–	cisa