Exploit / PoCcriticalExploited in the wild

Citrix NetScaler bug exploited in the wild since August (CVE-2023-4966)

Help Net Securityby @helpnetsecurityOct 30, 2023 · 09:56 UTC (Oct 30, 2023)2 min read2 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2023-4966 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-4966 CVE-2023-3519

Tags: cve-2023-4966 cve-2023-3519 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-3519	Unauthenticated RCE in Citrix NetScaler ADC and NetScaler Gateway	9.8	100%	KEVRansomwarePoC	Jul 19, 2023 KEV Jul 19, 2023
CVE-2023-4966	Info-Disclosure Buffer Overflow (CitrixBleed) in Citrix NetScaler ADC/Gateway	7.5	100%	KEVRansomware	Oct 10, 2023 KEV Oct 18, 2023

From the original article

2 min read at helpnetsecurity.com

A recently patched Citrix NetScaler ADC/Gateway information disclosure vulnerability (CVE-2023-4966) has been exploited by attackers in the wild since late August 2023, Mandiant researchers have revealed. Citrix’s security advisory , published on October 10, says that the vulnerability can lead to sensitive information disclosure, but did not explain what type of information can be disclosed to attackers.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.