VulnerabilitycriticalExploited in the wild

Citrix warns admins to immediately patch NetScaler for actively exploited zero

Security Affairsby @securityaffairsJan 17, 2024 · 11:02 UTC (Jan 17, 2024)1 min read2

Read at securityaffairs.com

Analyze CVE-2023-6548 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-6548 CVE-2023-6549 CVE-2023-4966

Tags: cve-2023-6548 cve-2023-6549 cve-2023-4966 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-4966	Info-Disclosure Buffer Overflow (CitrixBleed) in Citrix NetScaler ADC/Gateway	7.5	100%	KEVRansomware	Oct 10, 2023 KEV Oct 18, 2023
CVE-2023-6548 +1 related CVE CVE-2023-6549	Authenticated Code-Injection RCE in Citrix NetScaler ADC/Gateway	8.8 group max	3%	KEV	Jan 17, 2024 KEV Jan 17, 2024

From the original article

1 min read at securityaffairs.com

Citrix fixed two actively exploited zero-day vulnerabilities impacting Netscaler ADC and Gateway appliances. Citrix warns customers to install security updates to address two actively exploited zero-day vulnerabilities, tracked as CVE-2023-6548 and CVE-2023-6549, impacting Netscaler ADC and Gateway appliances. “Exploits of these CVEs on unmitigated appliances have been observed.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.