Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 19/07/2023. Patch affected systems as an emergency. It is known to be used in ransomware campaigns.
| Package | Affected versions | Patched versions |
|---|---|---|
| netscaler application delivery controller | ≥ 12.1, < 12.1-55.297≥ 13.0, < 13.0-91.13≥ 13.1, < 13.1-37.159≥ 13.1, < 13.1-49.13 | 12.1-55.29713.0-91.1313.1-37.15913.1-49.13 |
| netscaler gateway | ≥ 13.0, < 13.0-91.13≥ 13.1, < 13.1-49.13 | 13.0-91.1313.1-49.13 |
Unauthenticated remote code execution
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free