CVE-2023-6549highunder attackCWE-119

CVE-2023-6549: high-severity vulnerability in Cloud Software Group NetScaler ADC

Published · Updated

78Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 8.2epss 58%
from disclosure to weapon
Published on NVDJan 17
CISA KEVJan 17
exploitation probability
58%top 1% of all CVEs
observed exploitation
yesCISA + VulnCheck
Action required by CISAfederal deadline: 2024-02-07

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

In short

NetScaler ADC and Gateway products have a memory buffer flaw that allows attackers to crash the system or read sensitive data without needing to log in. An attacker can exploit this by sending specially crafted network requests to the vulnerable service.

Technical detail

CWE-119 buffer boundary violation in NetScaler ADC/Gateway permits unauthenticated attackers to trigger denial of service or out-of-bounds memory reads via malformed input. No authentication required; exploitation occurs at the network layer through direct request manipulation, resulting in service disruption or potential information disclosure.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Affected products
Cloud Software Group · NetScaler ADC
Related CVEs — Cloud Software Group NetScaler ADC

In the same product, most dangerous first.

CVE-2023-6548MEDIUMCVE-2023-6548EPSS 3.2%KEVCVE-2023-4967HIGHDenial of serviceEPSS 1.1%
References
https://support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-6549