Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 18/10/2023. Patch affected systems as an emergency. It is known to be used in ransomware campaigns.
| Package | Affected versions | Patched versions |
|---|---|---|
| netscaler application delivery controller | ≥ 12.1, < 12.1-55.300≥ 13.0, < 13.0-92.19≥ 13.1, < 13.1-37.164≥ 13.1, < 13.1-49.15≥ 14.1, < 14.1-8.50 | 12.1-55.30013.0-92.1913.1-37.16413.1-49.1514.1-8.50 |
| netscaler gateway | ≥ 13.0, < 13.0-92.19≥ 13.1, < 13.1-49.15≥ 14.1, < 14.1-8.50 | 13.0-92.1913.1-49.1514.1-8.50 |
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free