← CVE Radar
CVE-2023-6548Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.
8.8 HIGHEPSS 3.19%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 8.8 | HIGH | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 5.5 | MEDIUM | 3.1Citrix (CNA) | CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
CISA required action
⚡ Known exploited · remediation due Jan 24, 2024
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Details
- CVE ID
- CVE-2023-6548
- Status
- Analyzed
- Assigner (CNA)
- Citrix
- Published
- Jan 17, 2024
- Last modified
- 2026-06-17 06:50 UTC
- Weaknesses
- CWE-94 · Improper Control of Generation of Code ('Code Injection')
Affected Products
As published by the CNA in the CVE record.
Cloud Software GroupNetScaler ADC6 version ranges
- 14.1 before 12.35
- 13.1 before 51.15
- 13.0 before 92.21
- 13.1-FIPS before 37.176
- 12.1-FIPS before 55.302
- 12.1-NDcPP before 55.302
Cloud Software GroupNetScaler Gateway3 version ranges
- 14.1 before 12.35
- 13.1 before 51.15
- 13.0 before 92.21