NetScaler ADC/Gateway unauthenticated RCE (CVE-2023-3519)

Updates on Jul 19, 2023

Summary

An unauthenticated code injection in NetScaler ADC and Gateway was exploited as a zero-day to plant webshells, including on a US critical infrastructure organisation in June 2023. Citrix patched it on July 18, 2023.

Advisories4

• Citrix ADC and Citrix Gateway Security Bulletin for CVE-2023-3519, CVE-2023-3466, CVE-2023-3467Citrix · Jul 18, 2023
• Threat Actors Exploiting Citrix CVE-2023-3519 to Implant Webshells (AA23-201A)CISA · Jul 20, 2023
• NVD: CVE-2023-3519NVD
• CISA Known Exploited Vulnerabilities CatalogCISA · Jul 19, 2023