CVE Watch—

CVE-2023-6549

Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability

CVSS

—

Sin CVSS

EPSS

57.6%

p99

KEV

SÍ

17 ene 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

57.6%EPSS · 30 días57.6%

2026-09-172026-10-15

Ficha del catálogo KEV

Producto

Citrix / NetScaler ADC and NetScaler Gateway

Vulnerabilidad

Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability

Añadido a KEV

17 ene 2024

Remediar antes de

7 feb 2024

Uso conocido en ransomware

Descripción resumida

Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for a denial-of-service when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549; https://nvd.nist.gov/vuln/detail/CVE-2023-6549

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-84529.8 CRÍ

62.5%

KEV—69Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability50d CVE-2023-49669.4 CRÍ

100.0%

KEV—80Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability77d CVE-2023-35199.8 CRÍ

100.0%

KEV—80Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability72d CVE-2023-6548—

87.9%

KEV—76Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability—