Citrix Releases Security Fix for NetScaler Console Privilege Escalation Vulnerability

Citrix has released security updates for a high-severity security flaw impacting NetScaler Console formerly NetScaler ADM and NetScaler Agent that could lead to privilege escalation under certain conditions. The vulnerability, tracked as CVE-2024-12284 , has been given a CVSS v4 score of 8.8 out ...

CVE-2024-12284

Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows...

CVE-2024-12284

Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows...

CVE-2024-12284

Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows...

Netscaler VPX : NTP_Sync Failing even after ntp process restart

Netscaler VPX is configured with NTP sync to pool.ntp.org or any NTP server, but the NTP sync does not work even after disabling and enabling NTP sync and also restarting the NTP process...

CVE-2024-12284

CVE-2024-12284 affects Citrix NetScaler Console and NetScaler Agent. The issue is an authenticated privilege escalation via an Arbitrary File Write (ZipSlip) vulnerability in the StyleBook import flow, where an archive is unpacked without validating paths, allowing writing as root and potentially...

CVE-2024-12284 Authenticated privilege escalation

Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows...

CVE-2024-12284 Authenticated privilege escalation

Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows...

Citrix Systems NetScaler Console和NetScaler Agent 安全漏洞

Citrix Systems NetScaler Console and Citrix Systems NetScaler Agent are both products of Citrix Systems, U.S.A. Citrix Systems NetScaler Console is a single, unified and centralized cloud-based The Citrix Systems NetScaler Console is a single, unified and centralized cloud-based console Citrix...

NetScaler Console and NetScaler Agent Security Bulletin for CVE-2024-12284

Description of Problem A vulnerability has been discovered in NetScaler Console formerly NetScaler ADM and NetScaler Agent. Refer to below for further details: Affected Versions The following supported versions of NetScaler Console and NetScaler Agent are affected: NetScaler Console 14.1 BEFORE...

PT-2025-6517 · Citrix · Netscaler Console +1

Name of the Vulnerable Software and Affected Versions: NetScaler Console versions 13.1 through 13.1-56.18 NetScaler Console versions 14.1 through 14.1-38.53 NetScaler Agent versions 13.1 through 13.1-56.18 NetScaler Agent versions 14.1 through 14.1-38.53 Description: The issue is related to...

Cloud Software Group Security Advisory for CVE-2024-6387

Advisory for 3rd party CVE-2024-6387 Cloud Software Group is aware of the vulnerability CVE-2024-6387 impacting OpenSSH. Qualys has discovered a remote unauthenticated code execution vulnerability in OpenSSH’s server sshd in glibc-based Linux systems. Because this vulnerability is a regression of...

NetScaler Gateway - 14.1 - How to perform backup and restore of NetScaler configuration

Migrating configurations to a new device -- Facing issues while performing a restore of the backup...

ADC: ICMP Timestamp Request Remote Date Disclosure Vulnerability (CVE-1999-0524)

Vulnerability scan is flagging NetScaler device as vulnerable to ICMP Timestamp Request Remote Date Disclosure Vulnerability CVE-1999-0524 even when an ACL already exists to block ICMP type 13 traffic...

ADC: Unable to delete backup files from GUI

Customer sees 50 backup files on NetScaler GUI whereas same files are not visible on /var/nssysbackup directory. Whenever trying to delete the backup files from GUI it shows "ERROR: Backup file does not exist."...

The vulnerability of the Citrix NetScaler Application Delivery Controller (previously Citrix ADC) and the Citrix NetScaler Gateway (previously Citrix Gateway) access control systems, related to behavior anomaly detection, allows attackers to gain unauthorized access to limited functions.

The vulnerability of the Citrix NetScaler Application Delivery Controller previously Citrix ADC and the Citrix NetScaler Gateway previously Citrix Gateway access control system is related to the violation of expected behavior. Exploiting this vulnerability can allow an attacker, operating remotel...

The vulnerability of the Citrix NetScaler Application Delivery Controller (previously Citrix ADC) and the Citrix NetScaler Gateway (previously Citrix Gateway) access control systems lies in the fact that operations are executed outside of the buffer in memory, allowing attackers to cause service failures.

The vulnerability of the Citrix NetScaler Application Delivery Controller previously Citrix ADC and the Citrix NetScaler Gateway previously Citrix Gateway access control system lies in the escape of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cau...

Netscaler Gateway: ERR_CONNECTION_RESET when Accessing Gateway Vserver

When accessing Netscaler Gateway, we see ERRCONNECTIONRESET on the browser. Further, when we take a packet capture on Netscaler, we can see the Netscaler resetting the connection with Reset Code Window 9821. Further on checking the reason for this reset, we can understand this is due to the SSL...

NetScaler ADC and NetScaler Gateway Multiple Vulnerabilities (CTX691608)

The remote NetScaler ADC formerly Citrix ADC or NetScaler Gateway formerly Citrix Gateway device is version 12.1, 13.0, 13.1  before  13.1-55.34 or 14.1 before  14.1-29.72. It is, therefore, affected by multiple vulnerabilities: - Memory safety vulnerability leading to memory corruption and...

Vulnerabilities fixed in Citrix NetScaler ADC and NetScaler Gateway

Cirtix has fixed a number of vulnerabilities in NetScaler ADC and NetScaler Gateway. A malicious party could exploit the vulnerabilities to launch attacks that could lead to the following categories of damage: - Denial-of-Service DoS - Increased user privileges Citrix has released updates to...