Firetruck

CVE-2023-6548

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Citrix NetScaler ADC and NetScaler Gateway contain a code injection vulnerability that allows for authenticated remote code execution on the management interface with access to NSIP, CLIP, or SNIP.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
NetScaler ADCCloud Software Group / NetScaler ADC>= 12.1-FIPS, < 55.302affected
NetScaler ADCCloud Software Group / NetScaler ADC>= 12.1-NDcPP, < 55.302affected
NetScaler ADCCloud Software Group / NetScaler ADC>= 13.0, < 92.21affected
NetScaler ADCCloud Software Group / NetScaler ADC>= 13.1, < 51.15affected
NetScaler ADCCloud Software Group / NetScaler ADC>= 13.1-FIPS, < 37.176affected
NetScaler ADCCloud Software Group / NetScaler ADC>= 14.1, < 12.35affected
netscaler_application_delivery_controllercitrix / netscaler_application_delivery_controller>= 12.1, < 12.1-55.302affected
netscaler_application_delivery_controllercitrix / netscaler_application_delivery_controller>= 12.1, < 12.1-55.302affected
netscaler_application_delivery_controllercitrix / netscaler_application_delivery_controller>= 13.0, < 13.0-92.21affected
netscaler_application_delivery_controllercitrix / netscaler_application_delivery_controller>= 13.1, < 13.1-37.176affected
netscaler_application_delivery_controllercitrix / netscaler_application_delivery_controller>= 13.1, < 13.1-51.15affected
netscaler_application_delivery_controllercitrix / netscaler_application_delivery_controller>= 14.1, < 14.1-12.35affected
netscaler_gatewaycitrix / netscaler_gateway>= 13.0, < 13.0-92.21affected
netscaler_gatewaycitrix / netscaler_gateway>= 13.1, < 13.1-51.15affected
netscaler_gatewaycitrix / netscaler_gateway>= 14.1, < 14.1-12.35affected
NetScaler GatewayCloud Software Group / NetScaler Gateway>= 13.0, < 92.21affected
NetScaler GatewayCloud Software Group / NetScaler Gateway>= 13.1, < 51.15affected
NetScaler GatewayCloud Software Group / NetScaler Gateway>= 14.1, < 12.35affected