Exploit / PoCcriticalExploited in the wild

Citrix NetScaler zero-day exploited in the wild, patch is available (CVE-2023-3519)

Help Net Securityby @helpnetsecurityJul 21, 2023 · 11:15 UTC (Jul 21, 2023)2 min read2 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2023-3519 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-3519 CVE-2023-3466 CVE-2023-3467 CVE-2022-27518 CVE-2022-27510

Tags: cve-2023-3519 cve-2023-3466 cve-2023-3467 cve-2022-27518 cve-2022-27510 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-27510	Unauthorized access to Gateway user capabilities	9.8	1%		Nov 8, 2022
CVE-2022-27518	Unauthenticated RCE/Authentication Bypass in Citrix ADC and Gateway	9.8	7%	KEV	Dec 13, 2022 KEV Dec 13, 2022
CVE-2023-3467 +1 related CVE CVE-2023-3466	Privilege Escalation to root administrator (nsroot)	8.0 group max	1%		Jul 19, 2023
CVE-2023-3519	Unauthenticated RCE in Citrix NetScaler ADC and NetScaler Gateway	9.8	100%	KEVRansomwarePoC	Jul 19, 2023 KEV Jul 19, 2023

From the original article

2 min read at helpnetsecurity.com

Citrix has patched three vulnerabilities (CVE-2023-3519, CVE-2023-3466, CVE-2023-3467) in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway), one of which is a zero-day being exploited by attackers. CVE-2023-3519 is a remote code execution (RCE) vulnerability that could allow an unauthenticated threat actor to execute arbitrary code on a vulnerable server.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.