Vulnerabilitycritical

Citrix Devices Under Attack: NetScaler Flaw Exploited to Capture User Credentials

The Hacker Newsby @TheHackersNewsOct 10, 2023 · 05:52 UTC (Oct 10, 2023)3 min read2 · 1 read

Read at thehackernews.com

Analyze CVE-2023-3519 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-3519 CVE-2023-45208

Tags: cve-2023-3519 cve-2023-45208 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-3519	Unauthenticated RCE in Citrix NetScaler ADC and NetScaler Gateway	9.8	100%	KEVRansomwarePoC	Jul 19, 2023 KEV Jul 19, 2023
CVE-2023-45208	A command injection in the parsing_xml_stasurvey function inside libcgifunc.so of the D-Link DAP-X1860 repeater 1.00 through 1.01b05-01 allows attackers…	8.8	2%	PoC	Oct 10, 2023

From the original article

3 min read at thehackernews.com

 Ravie Lakshmanan  Oct 10, 2023 Network Security / Password A recently disclosed critical flaw in Citrix NetScaler ADC and Gateway devices is being exploited by threat actors to conduct a credential harvesting campaign.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.