Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 17/01/2024. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| netscaler application delivery controller | ≥ 12.1, < 12.1-55.302≥ 13.0, < 13.0-92.21≥ 13.1, < 13.1-37.176≥ 13.1, < 13.1-51.15≥ 14.1, < 14.1-12.35 | 12.1-55.30213.0-92.2113.1-37.17613.1-51.1514.1-12.35 |
| netscaler gateway | ≥ 13.0, < 13.0-92.21≥ 13.1, < 13.1-51.15≥ 14.1, < 14.1-12.35 | 13.0-92.2113.1-51.1514.1-12.35 |
Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free