CVE-2023-4966 Unauthenticated sensitive information disclosure

Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA virtual server...

Citrix Releases Security Updates for Multiple Products

Citrix has released security updates to address vulnerabilities affecting multiple products. A malicious cyber actor can exploit one of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Citrix security bulletins and apply...

Citrix Devices Under Attack: NetScaler Flaw Exploited to Capture User Credentials

A recently disclosed critical flaw in Citrix NetScaler ADC and Gateway devices is being exploited by threat actors to conduct a credential harvesting campaign. IBM X-Force, which uncovered the activity last month, said adversaries exploited "CVE-2023-3519 to attack unpatched NetScaler Gateways to...

CVE-2023-4966

Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA virtual server. Recent assessments: rbowes-r7 at October 24, 2023 6:01pm UTC reported: On October 10, 2023, Citrix posted an advisory about a...

PT-2023-6740

Name of the Vulnerable Software and Affected Versions Citrix NetScaler ADC and NetScaler Gateway affected versions not specified Description The issue is related to a Denial of Service condition in Citrix NetScaler ADC and NetScaler Gateway when configured as a Gateway or AAA Virtual Server. This...

PT-2023-5875

Name of the Vulnerable Software and Affected Versions NetScaler ADC affected versions not specified NetScaler Gateway affected versions not specified Description A buffer overflow issue exists in NetScaler ADC and NetScaler Gateway when configured as a Gateway VPN virtual server, ICA Proxy, CVPN,...

CVE-2023-4966: Improper Restriction of Operations within the Bounds of a Memory Buffer

Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA virtual server...

Citrix Systems ADC and NetScaler Gateway Security Vulnerability

Citrix Systems ADC and NetScaler Gateway is an application delivery controller from Citrix Systems. A security vulnerability exists in Citrix Systems ADC and NetScaler Gateway that stems from the presence of sensitive information disclosure...

How To: Update time zone on NetScaler

Change the default time zone of the NetScaler...

Reporting: "Error retrieving data source. Return code=257. Error message=Operation not permitted."

The message "Error retrieving data source. Return code = 257. Error message = Operation not permitted" is displayed when clicking Reporting on NetScaler:...

Cannot decompress firmware package with error "invalid compressed data--format violated"

Running command "tar -xvzf build-xx-xxnc64.tgz" in NetScaler shell to decompress firmware package, but it fails with error "invalid compressed data--format violated"...

How to Remove the ETag Field from the HTTP Response Header Using a Rewrite Policy

This article contains information about removing the ETag field from the HTTP response header using a rewrite policy and action on a NetScaler appliance. Background The rewrite policy and action are created using the Graphical User Interface GUI. Note : Disabling a feature on a NetScaler applianc...

The high MGMT CPU issue is preventing users access to Netscaler via GUI or SSH.

After upgrading Netscaler to version 13.1-42+, executing the "" command results in a high management CPU issue, causing users to be unable to log in to Netscaler via the GUI or SSH...

Updating certificate on NetScaler failed with error

The following error occurs when updating a certificate on the NetScaler appliance. ERROR: Certificate is referenced by a CRL, OCSP responder, vserver, service, monitor, SSL profile, CA Cert Group, another certificate, or a policy expression using XMLENCRYPT or XMLDECR...

NetScaler GUI shows Security Updates Alert

The security updates alert is shown after logging into the NetScaler GUI...

rdx.message_box_error after firmware upgrading

After OS firmware upgrading and try to connect Netscaler GUI, the following error may display...

How to drop illegal hostname contained request in NetScaler Gateway with responder policy

This article will describe how to configure responder policy to drop illegal hostname contained request in a NetScaler Gateway. e.g."nsg.lab.local" is the FQDN of NetScaler Gateway, to block user from accessing the gateway with other URLs, like IP address or other FQDN with tempering DNS records...

Windows Workspace Authentication Error "incorrect user name or password" via NetScaler Gateway

When using Windows workspace, after input username, password and passcode, error prompt "incorrect username or password"two-factor basic authentication. And can't access Storefront resource list. While access same Gateway with Web Browser is working fine...

NetScaler peer node status UNKNOWN in primary node

During setup of NetScaler High AvaliabilityHA, HA node 1 show status UNKNOWN in primary node. In NetScaler primary node GUI, 1. navigate toSystem High Availability Nodes , provide the peer node’s NSIP address in theRemote Node IP Address field and peer node's login credentials, 2. Click Create...

Radius authentication failure

According to network trace captured on NetScaler, there is no response from radius server after NetScaler sending Access-Request packet toradius server. This issue occurred suddenly, and the related configuration of radius authentication on NetScaler has not changed...