Cloud Software Group NetScaler ADC vulnerabilities

Latest Cloud Software Group NetScaler ADC CVEs

Newest publication first

1. CVE-2023-6549 Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read

   Published 2024-01-17

   High·CVSS 7.5 EPSS 57.6% CISA KEV added 2024-01-17 Exploited in the wild

   Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read

2. CVE-2023-6548 Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated...

   Published 2024-01-17

   High·CVSS 8.8 EPSS 3.2% CISA KEV added 2024-01-17 Exploited in the wild

   Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.

3. CVE-2023-4967 Denial of service

   Published 2023-10-27

   High·CVSS 7.5 EPSS 1.0%

   Denial of Service in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA Virtual Server

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.