CVE Watch—

CVE-2023-6549

Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability

CVSS

—

Sem CVSS

EPSS

57.6%

p99

KEV

SIM

17 de jan. de 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

57.6%EPSS · 30 dias57.6%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Citrix / NetScaler ADC and NetScaler Gateway

Vulnerabilidade

Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability

Adicionado ao KEV

17 de jan. de 2024

Corrigir até

7 de fev. de 2024

Uso conhecido em ransomware

Não

Descrição resumida

Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for a denial-of-service when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549; https://nvd.nist.gov/vuln/detail/CVE-2023-6549

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-84529.8 CRÍ

63.3%

KEV—69Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability71d CVE-2023-49669.4 CRÍ

100.0%

KEV—80Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability98d CVE-2023-35199.8 CRÍ

100.0%

KEV—80Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability93d CVE-2023-6548—

88.1%

KEV—76Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability—