https://pwn.watch/t/webshell Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 20 Jul 2023 00:00:00 GMT https://pwn.watch/i/citrix-netscaler-rce-cve-2023-3519 https://pwn.watch/i/citrix-netscaler-rce-cve-2023-3519 Thu, 20 Jul 2023 00:00:00 GMT critical <p>An unauthenticated code injection in NetScaler ADC and Gateway was exploited as a zero-day to plant webshells, including on a US critical infrastructure organisation in June 2023. Citrix patched it on July 18, 2023.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> 13.1-49.13, 13.0-91.13, FIPS/NDcPP builds: see vendor advisory</p> <p><strong>Latest updates:</strong></p><ul><li>2023-07-20: CISA advisory AA23-201A: webshell dropped on a critical infrastructure organisation's NetScaler in June 2023 (<a href="https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-201a">source</a>)</li><li>2023-07-19: CISA adds CVE-2023-3519 to the KEV catalog</li><li>2023-07-18: Citrix publishes CTX561482 and fixed builds; exploits seen on unmitigated appliances (<a href="https://support.citrix.com/external/article/CTX561482/citrix-adc-and-citrix-gateway-security-b.html">source</a>)</li></ul> <p><strong>CVEs:</strong> CVE-2023-3519</p>