Actively exploited · Published Jan 17, 2024 · Assigned by Citrix
CVE-2023-6548
Medium 5.5 Exploited
In plain English
A medium-severity code injection in NetScaler ADC from Cloud Software Group. Attackers are actively exploiting it in the wild (listed by CISA on January 17, 2024). The chance it is exploited in the next 30 days is estimated at 3.2% (higher than 88% of all known vulnerabilities). Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA guidance
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Federal agencies must remediate by Jan 24, 2024.
Official description
Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Cloud Software Group | NetScaler ADC | 14.1 – before 12.3513.1 – before 51.1513.0 – before 92.2113.1-FIPS – before 37.17612.1-FIPS – before 55.30212.1-NDcPP – before 55.302 |
| Cloud Software Group | NetScaler Gateway | 14.1 – before 12.3513.1 – before 51.1513.0 – before 92.21 |
Weakness: CWE-94 · Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L