VULNERABILITY INTELLIGENCE

CVE-2023-6548

CVSS score5.5 MEDIUM
EPSS probability3.19%
CISA KEVKnown exploited vulnerability
Published2024-01-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Known Exploited Vulnerability

Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

Vendor / product: Citrix / NetScaler ADC and NetScaler Gateway

Description

Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.

Weakness classification

  • secure@citrix.com: CWE-94
  • nvd@nist.gov: CWE-94

Primary references