CVE-2023-3519
KEV · RansomwareCitrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
View CVE record →- Vendor / Project
- Citrix
- Product
- NetScaler ADC and NetScaler Gateway
- Date added
- Jul 19, 2023
- Due date
- Aug 9, 2023
- Known ransomware use
- Known
- CWEs
- CWE-94
Description
Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerability that allows for unauthenticated remote code execution.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.