Citrix Systems NetScaler Gateway and Citrix Systems NetScaler ADC Security Vulnerabilities

Citrix Systems NetScaler Gateway Citrix Systems Gateway and Citrix Systems NetScaler ADC are both products of Citrix Systems, Inc.Citrix Systems NetScaler Gateway is a secure remote access solution. The solution provides administrators with application-level and data-level controls to enable user...

Citrix Systems Multiple Products Security Vulnerabilities

Citrix Systems NetScaler Console and others are products of Citrix Systems, Inc.Citrix Systems NetScaler Console is a single, unified and centralized cloud-based console.Citrix Systems NetScaler Agent is an agent program.Citrix Systems NetScaler SDX is a hardware-based application delivery...

NetScaler ADC and NetScaler Gateway Multiple Vulnerabilities (CTX677944)

The remote NetScaler ADC formerly Citrix ADC or NetScaler Gateway formerly Citrix Gateway device is version 12.1, 13.0 before 13.0-92.31, 13.1 before 13.1-53.17, or 14.1 before 14.1-25.53. It is, therefore, affected by multiple vulnerabilities: - Denial of Service CVE-2024-5491 - Open redirect...

NetScaler Console, Agent and SDX (SVM) Security Bulletin for CVE-2024-6235 and CVE-2024-6236

Description of Problem Two vulnerabilities have been discovered in NetScaler Console formerly NetScaler ADM, NetScaler SDX SVM, and NetScaler Agent. Refer to below for further details: Affected Versions The following supported version of NetScaler Console formerly NetScaler ADM is affected by...

NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2024-5491 and CVE-2024-5492

Description of Problem Two vulnerabilities have been discovered in NetScaler ADC formerly Citrix ADC and NetScaler Gateway formerly Citrix Gateway. Refer to below for further details: Affected Versions The following supported versions of NetScaler ADC and NetScaler Gateway are affected by the...

PT-2024-36434 · Citrix · Netscaler

Name of the Vulnerable Software and Affected Versions: NetScaler affected versions not specified Description: The issue is related to a Denial of Service in NetScaler ADC and NetScaler Gateway in NetScaler. No information is provided about the estimated number of potentially affected devices...

PT-2024-36437 · Citrix · Netscaler Gateway +1

Name of the Vulnerable Software and Affected Versions: NetScaler ADC and NetScaler Gateway affected versions not specified Description: An open redirect issue allows a remote unauthenticated attacker to redirect users to arbitrary websites. This affects NetScaler ADC and NetScaler Gateway, enabli...

PT-2024-5007 · Citrix · Netscaler Console +2

Name of the Vulnerable Software and Affected Versions: NetScaler Console formerly NetScaler ADM affected versions not specified NetScaler Agent affected versions not specified NetScaler SDX affected versions not specified Description: The issue is related to a Denial of Service in NetScaler...

PT-2024-5023 · Citrix · Citrix Netscaler Console

Name of the Vulnerable Software and Affected Versions: Citrix NetScaler Console affected versions not specified Description: The issue is related to sensitive information disclosure in the NetScaler Console due to improper authentication. This allows an unauthenticated attacker to obtain an...

Cloud Software Group Security Advisory for CVE-2024-6387

Advisory for 3rd party CVE-2024-6387 Cloud Software Group is aware of the vulnerability CVE-2024-6387 impacting OpenSSH. Qualys has discovered a remote unauthenticated code execution vulnerability in OpenSSH’s server sshd in glibc-based Linux systems. Because this vulnerability is a regression of...

[NetScaler] Built-in commands fail because feature is not licensed

On a NetScaler appliance, you may see some built-in commands are failed because feature is not licensed. For example, you use a Standard/Enterprise license, avaiable features in Premium license may have some built-in commands, and they'll get failures. It will not cause any business impact to...

NSC: NetScaler (Citrix ADC) MPX/SDX 26000Z-50S, MPX 15000Z-50G FIPS

Citrix Systems, Inc. announces a Notice of Status Change for the NetScaler Citrix ADC MPX/SDX 26000Z-50S, MPX 15000Z-50G FIPS The tables below explain the NetScaler Citrix ADC life cycle management milestones as well as important information regarding dates and options during this period. The dat...

How to Restrict Access to NetScaler Owned IP Addresses Only from the Management Applications

Any application running on the NetScaler appliance's operating system is exposed to the world through NetScaler-owned IP addresses. This exposure may result in network attacks, which can negatively impact the performance of the NetScaler appliance. Note : You can block the non-management...

SSH communication between Netscaler Console nodes and/or Netscaler/Netscaler-SDX instance(s) fails

After upgrading Netscaler Console aka. ADM from earlier versions to either13.1-53.17 or 53.22 refresh build or 14.1-25.53, certain tasks like re-creating HA deployment, Netscaler backup , or other tasks involving SSH connection may fail and manifest in error popup or log entries in...

After on-prem NetScaler Console (formerly ADM) upgraded to 14.1-21.60 VIP Licenses reduced warning

Duringupgrade from on-prem NetScaler Console formerly ADM version 13.0/13.1 to build 14.1-21.60 below warning is showed: Warning Text: Default NetScaler Console VIP Licenses will be reduced to 2 after the upgrade After upgrade from on-prem NetScaler Console formerly ADM version 13.0/13.1 to build...

[NetScaler-SDX] SVM Management UI displays "Halted" about VPX "VM State"

In a rare case, if you check the NetScaler VPX state on SVM UI, you may see "VM State" displays "Halted" with red light. Your VPX is actually healthy and you can logon VPX NSIP successfully. Business traffic is not impacted...

U.S. Dept Of Defense: Out-Of-Bounds Memory Read on ███

Vulnerability description not provided...

How To: Configure Multi Factor Authentication (MFA) for NetScaler (ADC) administration.

Configure Multi Factor Authentication MFA to harden security login for NetScaler administration...

Unable to access NetScaler via SSH. SSH daemon process not running or able to start.

Device not accessible via SSH. Admin GUI actions that require SSH i.e. Generate Tech Support Bundle, Ping, simulated CLI do not work, shows error ""errorcode":"2138","message":"Not authorized to execute this command","severity":"ERROR"" Unable to access device via SCP. sshd process not running an...

[NetScaler-Gateway] iOS CWA cannot connect to Store, 500 Internal Server Error 43549

You may encounter the issue when login with iOS workspace app, user cannot connect to StoreFront after login NetScaler gateway. In nstrace, you can observe the following symptom: 1. NetScaler responds iosc cookie to client: POST /nf/auth/webview/done HTTP/1.1...HTTP/1.1 200 OKSet-Cookie:...