CVE Watch—

CVE-2023-6548

Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

CVSS

—

Sin CVSS

EPSS

3.2%

p87

KEV

SÍ

17 ene 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

3.2%EPSS · 30 días3.2%

2026-08-022026-08-31

Ficha del catálogo KEV

Producto

Citrix / NetScaler ADC and NetScaler Gateway

Vulnerabilidad

Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

Añadido a KEV

17 ene 2024

Remediar antes de

24 ene 2024

Uso conocido en ransomware

Descripción resumida

Citrix NetScaler ADC and NetScaler Gateway contain a code injection vulnerability that allows for authenticated remote code execution on the management interface with access to NSIP, CLIP, or SNIP.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549; https://nvd.nist.gov/vuln/detail/CVE-2023-6548

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-84529.8 CRÍ

74.1%

KEV—72Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability5d CVE-2023-49669.4 CRÍ

100.0%

KEV—80Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability32d CVE-2023-35199.8 CRÍ

100.0%

KEV—80Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability26d CVE-2023-6549—

99.0%

KEV—80Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability—