Firetruck

CVE-2023-4966

KEV · Ransomware
Updated Jul 31, 2026 · PUBLISHED
View KEV entry →

Description

Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
NetScaler ADCCitrix / NetScaler ADC>= 12.1-FIPS, < 55.300affected
NetScaler ADCCitrix / NetScaler ADC>= 12.1-NDcPP, < 55.300affected
NetScaler ADCCitrix / NetScaler ADC>= 13.0, < 92.19affected
NetScaler ADCCitrix / NetScaler ADC>= 13.1, < 49.15affected
NetScaler ADCCitrix / NetScaler ADC>= 13.1-FIPS, < 37.164affected
NetScaler ADCCitrix / NetScaler ADC>= 14.1, < 8.50affected
NetScaler GatewayCitrix / NetScaler Gateway>= 13.0, < 92.19affected
NetScaler GatewayCitrix / NetScaler Gateway>= 13.1, < 49.15affected
NetScaler GatewayCitrix / NetScaler Gateway>= 14.1, < 8.50affected