VulnCheck KEV: CVE-2023-3519

Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerability that allows for unauthenticated remote code execution...

Vulnerabilities fixed in Citrix ADC and Citrix Gateway

Citrix has fixed vulnerabilities in NetScaler ADC and NetScaler Gateway. A malicious party could exploit the vulnerabilities to execute a cross-site scripting attack, obtain elevated privileges or execute arbitrary code. Citrix reports that the vulnerability with attribute CVE-2023-3519 is being...

Citrix ADC (NetScaler) Forms SSO Target RCE

A vulnerability exists within Citrix ADC that allows an unauthenticated attacker to trigger a stack buffer overflow of the nsppe process by making a specially crafted HTTP GET request. Successful exploitation results in remote code execution as root. Module Options msf use...

Citrix Secure Access for Windows fails to allow traffic through VPN after an upgrade to 23.x.x.x

After a successful connection to the Citrix Secure Access CSA client in full tunnel, none of the traffic passes through the VPN. Access to the applications using an IP address or DNS over the tunnel is blocked. The issue is limited to domain-joined machines where the Intranet IP address is...

How to Verify Load Balancing Cookie Insert Persistence on NetScaler

...

Both NetScaler HA nodes in secondary state

Both HA nodes in secondary state...

Citrix Systems Citrix Gateway和Citrix ADC 安全漏洞

Citrix Systems Citrix Gateway Citrix Systems NetScaler Gateway and Citrix ADC are both products of Citrix Systems, Inc.Citrix Gateway is a secure remote access solution. The product provides administrators with application-level and data-level controls to enable users to remotely access...

ICA latency in Director frequently displays high (not 64000ms) when accessed via NetScaler Gateway

When user accessed Virtual Desktop via NetScaler, admin may find the "ICA latency" in Director frequently displays unreasonable high valuenot 64000ms, while "ICA RTT" value is in normal range. It's telling ICA RTT ICA latency. In fact, users have no high latency or bad interaction experience whil...

How to Change the Maximum Segment Size on a NetScaler Appliance

This article describes how to change the Maximum Segment Size MSS for all sourced packets from a NetScaler appliance. Requirements Command line access to the NetScaler appliance through the console or a Secure Shell SSH client General knowledge of the NetScaler Command Line Interface CLI and UNIX...

Citrix Gateway&Cloud MFA - Session Validation Vulnerability

Document Title: =============== Citrix Gateway&Cloud MFA - Session Validation Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2324 Vulnerability Magazine:...

How to check the number of NSPPEs running on Netscaler

This article describes how to check number of NSPPEs running on Netscaler...

[NetScaler] Service State doesn't sync to Secondary node in HA setup

When you build NetScaler HA pair with VPX on SDX platform. You may observe the issue that Primary doesn't sync service UP/DOWN events to Secondary node. The issue can impact SDX platforms:SDX 8900, SDX 15000, SDX 15000-50G, SDX 26000, and SDX 26000-50S...

"Cannot Complete Your Request" via Oauth after Upgrading NetScaler from 12.1 to 13.0

After ADC is upgraded from 12.1 to 13.0, the user keeps getting "Cannot Complete Your Request" when attempting to access resources through ADC with Oauth authentication. As a comparison, there is no issue accessing StoreFront directly in the intranet without Oauth...

DNS Resolution through NetScaler Fails with Unknown Host Error

DNS resolution for FQDN fails and following error is received when pinging FQDN from NetScaler: VPX-190 ping www.citrix.com ping: cannot resolve www.citrix.com: Unknown host ERROR:...

Citrix Gateway Store Domain Passthrough Limitation

Explain domain passthrough support limitation with Netscaler Gateway scenario...

Randomly Failure when Launching Virtual Desktop through NetScaler Gateway

Randomly, end user would report Virtual Desktop launching failure issue via NetScaler Gateway...

How to configure NetScaler to reset interfaces when HA manually failover

When the HA failover is performed manually, the old primary node can reset all interfaces...

How to configure "Client IP-User Name-VDA server" one-to-one association via NetScaler Gateway

This Article provide a configuration sample in NetScaler to fulfill "Client IP Address--User Name--VDA server" one-to-one association via NetScaler Gateway...

[NS 13.1]iOS/Android Workspace adding account failure via NetScaler Gateway

After NetScaler upgrade from 13.0 to 13.1, end-user may find Mobile Workspace Application will prompt error when adding account via NetScaler Gateway: On Android Workspace: it shows "An error has occurred while connecting. Check your server address and data connection.Error Code 548." On iOS...

Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2023-197)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-197 advisory. Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version between 4.0.0 to 4.0.5, by default, is susceptible to a heap-based buffer overflow, and...