CVE-2023-6548

Vulnerability updated 2 months ago (2024-11-29T14:42:21.096Z)
Download STIX
Preview STIX
CVE-2023-6548 is a significant vulnerability discovered in Citrix's NetScaler ADC and NetScaler Gateway. The flaw, identified as a code injection issue within the management interface, allows for remote code execution by an authenticated hacker. This security loophole could be exploited through a specially designed request, providing potential attackers with a dangerous avenue to infiltrate and manipulate the system. The exploitation of this vulnerability (CVSS score of 5) requires access to NSIP, CLIP, or SNIP with the management interface. Although the exploit necessitates authenticated access, even low privileged users could potentially perform remote code execution on the Management Interface. This makes CVE-2023-6548 a considerable threat, as it broadens the pool of potential offenders beyond just high-level users. To mitigate the risks associated with CVE-2023-6548 and another vulnerability (CVE-2023-6549), Citrix released security updates for NetScaler ADC and NetScaler Gateway. These updates aim to address these vulnerabilities and enhance the overall security of their systems. Users are advised to apply these updates promptly to protect their systems from potential attacks.
Description last updated: 2024-05-05T00:55:55.273Z
What's your take? (Question 1 of 4)
Help tune the shared Cybergeist dataset, assist your peers, and earn karma. Expand the panel to get started.
Aliases We are not currently tracking any aliases
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
netscaler
citrix
Vulnerability
Exploit
Remote Code ...
Analyst Notes & Discussion
Be the first to leave your mark here! Log in to share your views and vote.
Source Document References
Information about the CVE-2023-6548 Vulnerability was read from the documents corpus below. This display is limited to 20 results, create a free account to see more
PreviewSource LinkCreatedAtTitle
CERT-EU
a year ago
Checkpoint
a year ago
Malwarebytes
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
DARKReading
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
Securityaffairs
a year ago
CERT-EU
a year ago
BankInfoSecurity
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
Securityaffairs
a year ago
CERT-EU
a year ago
CERT-EU
a year ago