Log In
Request Demo Start 30-Day Trial
Back to CVEs
CVE CVE

CVE-2023-6549

CISA Known Exploited Vulnerability (KEV)

Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability

January 17, 2024

February 7, 2024

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Description

Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read

References

Weakness Enumeration

CWE-ID CWE Name

CWE-119 		Improper Restriction of Operations within the Bounds of a Memory Buffer

Known Affected Software Configurations


cpe:2.3:a:citrix:netscaler_gateway:13.0-92.19:*:*:*:*:*:*:*

cpe:2.3:a:citrix:netscaler_gateway:13.1-49.15:*:*:*:*:*:*:*

cpe:2.3:a:citrix:netscaler_gateway:14.1-8.50:*:*:*:*:*:*:*

cpe:2.3:a:citrix:netscaler_gateway:14.1:*:*:*:*:*:*:*

cpe:2.3:a:citrix:netscaler_application_delivery_controller:12.1-55.300:*:*:*:fips:*:*:*

cpe:2.3:a:citrix:netscaler_application_delivery_controller:12.1-55.300:*:*:*:ndcpp:*:*:*

cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.0-92.19:*:*:*:-:*:*:*

cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1-37.164:*:*:*:fips:*:*:*

cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1-49.15:*:*:*:-:*:*:*

cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1-8.50:*:*:*:-:*:*:*

cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1:*:*:*:-:*:*:*

cpe:2.3:a:citrix:netscaler_gateway:13.1-49.13:*:*:*:*:*:*:*

cpe:2.3:a:citrix:netscaler_gateway:13.1:*:*:*:*:*:*:*

cpe:2.3:a:citrix:netscaler_gateway:13.0-91.13:*:*:*:*:*:*:*

cpe:2.3:a:citrix:netscaler_gateway:13.0:*:*:*:*:*:*:*

cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1-49.13:*:*:*:-:*:*:*

cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1:*:*:*:-:*:*:*

cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1-37.159:*:*:*:fips:*:*:*

cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1:*:*:*:fips:*:*:*

cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.0-91.13:*:*:*:-:*:*:*

cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.0:*:*:*:-:*:*:*

cpe:2.3:a:citrix:netscaler_application_delivery_controller:12.1-55.297:*:*:*:ndcpp:*:*:*

cpe:2.3:a:citrix:netscaler_application_delivery_controller:12.1:*:*:*:ndcpp:*:*:*

cpe:2.3:a:citrix:netscaler_application_delivery_controller:12.1-55.297:*:*:*:fips:*:*:*

cpe:2.3:a:citrix:netscaler_application_delivery_controller:12.1:*:*:*:fips:*:*:*

cpe:2.3:a:citrix:netscaler_gateway:11.1-65.20:*:*:*:*:*:*:*

cpe:2.3:a:citrix:netscaler_gateway:12.1:*:*:*:*:*:*:*

cpe:2.3:a:citrix:netscaler_gateway:11.1:*:*:*:*:*:*:*

Details

Source:
NVD
Published:
Updated:

Risk information

CVSS v3

Base score:
7.5
Severity:

HIGH

Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2

Not defined