Vulnerabilities CVE-2023-4966

CVE-2023-4966

Medium

Open

KEV

TLP:CLEAR

Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Citrix — NetScaler ADC and NetScaler Gateway — Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.

Details

EPSS Score ⓘ: 100.00%

100th percentile
Confidence: 100%
CISA KEV
Date Added: Oct 18, 2023
Patch Due: Nov 8, 2023
Required Action: Apply mitigations and kill all active and persistent sessions per vendor instructions [https://www.netscaler.com/blog/news/cve-2023-4966-critical-security-update-now-available-for-netscaler-adc-and-netscaler-gateway/] OR discontinue use of the product if mitigations are unavailable.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.