ClosedCriticalPatched
NetScaler ADC/Gateway unauthenticated RCE (CVE-2023-3519)
Citrix NetScaler ADC and NetScaler Gateway
An unauthenticated code injection in NetScaler ADC and Gateway was exploited as a zero-day to plant webshells, including on a US critical infrastructure organisation in June 2023. Citrix patched it on July 18, 2023.
Why this severity: CVSS 9.8 (NVD), zero-day, actively exploited (CISA KEV), known ransomware use
- Started
- Jul 18, 2023
- Closed
- Jul 20, 2023
Affected
- NetScaler ADC and Gateway configured as a Gateway or AAA virtual server; exact builds: see vendor advisory
Fixed in
- 13.1-49.13
- 13.0-91.13
- FIPS/NDcPP builds: see vendor advisory
Updates by day3
▸Jul 20, 2023
Link #CISA advisory AA23-201A: webshell dropped on a critical infrastructure organisation's NetScaler in June 2023
Source
▸Jul 19, 2023
Link #CISA adds CVE-2023-3519 to the KEV catalog
▸Jul 18, 2023
Link #Citrix publishes CTX561482 and fixed builds; exploits seen on unmitigated appliances
Source
Advisories4
Get an email when a new major security incident drops. No spam, unsubscribe any time.
