CVE-2023-6549
CVE-2023-6549
In short
NetScaler ADC and Gateway products have a memory buffer flaw that allows attackers to crash the system or read sensitive data without needing to log in. An attacker can exploit this by sending specially crafted network requests to the vulnerable service.
Technical detail
CWE-119 buffer boundary violation in NetScaler ADC/Gateway permits unauthenticated attackers to trigger denial of service or out-of-bounds memory reads via malformed input. No authentication required; exploitation occurs at the network layer through direct request manipulation, resulting in service disruption or potential information disclosure.
Summary generated and translated by AI from the official description.
Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Affected products
Cloud Software Group · NetScaler ADCWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →