NetScaler ADC vulnerabilities

3 known vulnerabilities in NetScaler ADC from Cloud Software Group. 3 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Exploited

  CVE-2023-6549Jan 17, 2024Cloud Software GroupEPSS 57.6%

  Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read

• 8.8 High severity

  Citrix NetScaler ADC and NetScaler Gateway Code Injection Exploited

  CVE-2023-6548Jan 17, 2024Cloud Software GroupEPSS 3.19%

  Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interf

• 7.5 High severity

  NetScaler ADC: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2023-4967Oct 27, 2023Cloud Software GroupEPSS 1.03%

  Denial of Service in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA Virtual Server