ACTIEF MISBRUIKT
CVE-2023-4966: Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
| Leverancier | Citrix |
|---|---|
| Product | NetScaler ADC and NetScaler Gateway |
| Actief misbruikt | Ja |
| Toegevoegd aan CISA KEV | 18 okt 2023 |
| CISA-deadline (Amerikaanse overheid) | 8 nov 2023 |
| Gebruik door ransomware | Bekend |
| Zwakte (CWE) | CWE-119 |
Vereiste actie (tekst van CISA, Engels)
Apply mitigations and kill all active and persistent sessions per vendor instructions [https://www.netscaler.com/blog/news/cve-2023-4966-critical-security-update-now-available-for-netscaler-adc-and-netscaler-gateway/] OR discontinue use of the product if mitigations are unavailable.
Beschrijving (NVD, Engels)
Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
BRONNEN
Andere lekken bij Citrix
- CVE-2026-88779: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
- CVE-2026-88772: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
- CVE-2026-88771: Citrix NetScaler Improper Input Validation Vulnerability
- CVE-2026-19490: Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
- CVE-2026-8452: Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.