Vulnerabilities fixed in Citrix Netscaler ADC and Netscaler Gateway

🗓️ 16 Jan 2024 00:00:00Reported by NCSCType

Citrix fixes CVE-2023-6548/6549 in Netscaler ADC and Gateway; 6548 needs management access; 6549 causes denial of service if gateway or authentication server configured; updates released.

Reporter	Title	Published	Views	Family All 38
ATTACKERKB	CVE-2023-6549	17 Jan 202421:15	–	attackerkb
ATTACKERKB	CVE-2023-6548	17 Jan 202420:15	–	attackerkb
BDU FSTEC	The vulnerability of Citrix ADC application delivery controllers (formerly known as Citrix NetScaler Application Delivery Controller) and Citrix Gateway virtual environment access control systems (formerly known as Citrix NetScaler Gateway) relates to an operation that goes beyond the buffer in memory, allowing a malicious actor to cause service failures.	17 Jan 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Citrix ADC application delivery controllers (formerly known as Citrix NetScaler Application Delivery Controller) and Citrix Gateway access control systems (formerly known as Citrix NetScaler Gateway) stems from improper code generation, allowing attackers to execute arbitrary code.	18 Jan 202400:00	–	bdu_fstec
Circl	CVE-2023-6548	17 Jan 202404:00	–	circl
Circl	CVE-2023-6549	17 Jan 202404:00	–	circl
CISA KEV Catalog	Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability	17 Jan 202400:00	–	cisa_kev
CISA KEV Catalog	Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability	17 Jan 202400:00	–	cisa_kev
CISA	CISA Adds Three Known Exploited Vulnerabilities to Catalog	17 Jan 202412:00	–	cisa
CISA	Citrix Releases Security Updates for NetScaler ADC and NetScaler Gateway	18 Jan 202412:00	–	cisa

16 Jan 2024 00:00Current

7.9High risk

Vulners AI Score7.9

CVSS 3.18.2 - 8.8

EPSS0.80244