CVE-2023-6549
KEVCitrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
View CVE record →- Vendor / Project
- Citrix
- Product
- NetScaler ADC and NetScaler Gateway
- Date added
- Jan 17, 2024
- Due date
- Feb 7, 2024
- Known ransomware use
- Unknown
- CWEs
- CWE-119
Description
Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for a denial-of-service when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.