In CISA KEV9.4 CriticalCWE-119Ransomware use
CVE-2023-4966
Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
CitrixNetScaler ADC and NetScaler Gateway
Status
- Exploited in the wild
- In CISA KEV since 18 Oct 2023
- Vendor fix available
- Known ransomware use
Federal deadlineWed 8 Nov 2023, 23:59 UTC
Passed 1081 days ago
CISA KEV · added 18 Oct 2023
Exploit probabilityEPSSchecked 24 Oct
99.9%probability of exploitation in the next 30 days
Higher than 100% of scored CVEs
SeverityCVSS
9.4Critical
Description NVD
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
CISA required action
Apply mitigations and kill all active and persistent sessions per vendor instructions [https://www.netscaler.com/blog/news/cve-2023-4966-critical-security-update-now-available-for-netscaler-adc-and-netscaler-gateway/] OR discontinue use of the product if mitigations are unavailable.
Coverage 1 article · 1 outlet
- ThreatsDay Bulletin: FortiGate RaaS, Citrix Exploits, MCP Abuse, LiveChat Phish & MoreThe Hacker News · first in our coverage · mentions it in passing