CVE-2023-3467

—

CVSS 3.1

8.0 high

EPSS

1%p69

Published

Jul 19, 2023 (Jul 19, 2023)

Modified

Jun 17, 2026

Description

Privilege Escalation to root administrator (nsroot)

Vendors: citrix
Products: netscaler application delivery controller, netscaler gateway
Weakness: CWE-269
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news6 stories

Hundreds of Citrix Endpoints Compromised With Webshells

Infosecurity MagazineAug 3, 10:00 UTC · Aug 3, 2023Exploit / PoC CVE-2023-3519 CVE-2023-3466 CVE-2023-3467

60

Thousands of Citrix Servers Exposed to Zero

Infosecurity MagazineJul 24, 10:00 UTC · Jul 24, 2023Exploit / PoC CVE-2023-3519 CVE-2023-3466 CVE-2023-3467

60

Week in review: VirusTotal data leak, Citrix NetScaler zero-day exploitation

Help Net SecurityJul 23, 00:00 UTC · Jul 23, 2023Exploit / PoC in the wildCVE-2023-3519 CVE-2023-29298 CVE-2023-38203+3 CVEs

60

Zero-Day Attacks Exploited Critical Vulnerability in Citrix ADC and Gateway

The Hacker NewsJul 22, 03:57 UTC · Jul 22, 2023Exploit / PoC in the wildCVE-2023-3519 CVE-2023-3466 CVE-2023-3467+3 CVEs

60

Citrix warns of actively exploited zero

Security AffairsJul 21, 19:35 UTC · Jul 21, 2023Exploit / PoC in the wildCVE-2023-3519 CVE-2023-3466 CVE-2023-3467

60

Citrix NetScaler zero-day exploited in the wild, patch is available (CVE-2023-3519)

Help Net SecurityJul 21, 11:15 UTC · Jul 21, 2023Exploit / PoC in the wildCVE-2023-3519 CVE-2023-3466 CVE-2023-3467+2 CVEs

60