CVE Watch—

CVE-2023-6548

Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

CVSS

—

Sin CVSS

EPSS

3.2%

p88

KEV

SÍ

17 ene 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

3.2%EPSS · 30 días3.2%

2026-09-162026-10-14

Ficha del catálogo KEV

Producto

Citrix / NetScaler ADC and NetScaler Gateway

Vulnerabilidad

Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

Añadido a KEV

17 ene 2024

Remediar antes de

24 ene 2024

Uso conocido en ransomware

Descripción resumida

Citrix NetScaler ADC and NetScaler Gateway contain a code injection vulnerability that allows for authenticated remote code execution on the management interface with access to NSIP, CLIP, or SNIP.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549; https://nvd.nist.gov/vuln/detail/CVE-2023-6548

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-84529.8 CRÍ

62.4%

KEV—69Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability50d CVE-2023-49669.4 CRÍ

100.0%

KEV—80Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability77d CVE-2023-35199.8 CRÍ

100.0%

KEV—80Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability72d CVE-2023-6549—

99.1%

KEV—80Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability—