Lucene search
CitrixCTX561482HistoryJul 18, 2023 - 1:43 p.m.
Citrix ADC and Citrix Gateway Security Bulletin for CVE-2023-3519, CVE-2023-3466, CVE-2023-3467
2023-07-1813:43:46
support.citrix.com
64
netscaler adc
netscaler gateway
vulnerabilities
cve-2023-3519
cve-2023-3466
cve-2023-3467
eol
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.912 High
EPSS
Percentile
98.9%
Multiple vulnerabilities have been discovered in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway).
The following supported versions of NetScaler ADC and NetScaler Gateway are affected by the vulnerabilities:
- NetScaler ADC and NetScaler Gateway13.1before13.1-49.13
- NetScaler ADC and NetScaler Gateway13.0before 13.0-91.13
- NetScaler ADC 13.1-FIPS before 13.1-37.159
- NetScaler ADC 12.1-FIPS before 12.1-55.297
- NetScaler ADC 12.1-NDcPP before 12.1-55.297
Note: NetScaler ADC and NetScaler Gateway version 12.1 is now End Of Life (EOL) and is vulnerable.
This bulletin only applies to customer-managed NetScaler ADC and NetScaler Gateway. Customers using Citrix-managed cloud services or Citrix-managed Adaptive Authentication do not need to take any action.
Affected configurations
Node
citrixnetscalerRange13.1≥
ORcitrixnetscalerRange≤49.13
ORcitrixnetscalerRange14.0.0≥
ORcitrixnetscalerRange15.0.0≥
ORcitrixnetscalerRange16.0.0≥
ORcitrixnetscalerRange17.0.0≥
ORcitrixnetscalerRange18.0.0≥
ORcitrixnetscalerRange19.0.0≥
ORcitrixnetscalerRange20.0.0≥
ORcitrixnetscalerRange21.0.0≥
ORcitrixnetscalerRange22.0.0≥
ORcitrixnetscalerRange23.0.0≥
ORcitrixnetscalerRange24.0.0≥
ORcitrixnetscalerRange25.0.0≥
ORcitrixnetscalerRange26.0.0≥
ORcitrixnetscalerRange27.0.0≥
ORcitrixnetscalerRange28.0.0≥
ORcitrixnetscalerRange29.0.0≥
ORcitrixnetscalerRange30.0.0≥
ORcitrixnetscalerRange31.0.0≥
ORcitrixnetscalerRange32.0.0≥
ORcitrixnetscalerRange33.0.0≥
ORcitrixnetscalerRange34.0.0≥
ORcitrixnetscalerRange35.0.0≥
ORcitrixnetscalerRange36.0.0≥
ORcitrixnetscalerRange37.0.0≥
ORcitrixnetscalerRange38.0.0≥
ORcitrixnetscalerRange39.0.0≥
ORcitrixnetscalerRange40.0.0≥
ORcitrixnetscalerRange41.0.0≥
ORcitrixnetscalerRange42.0.0≥
ORcitrixnetscalerRange43.0.0≥
ORcitrixnetscalerRange44.0.0≥
ORcitrixnetscalerRange45.0.0≥
ORcitrixnetscalerRange46.0.0≥
ORcitrixnetscalerRange47.0.0≥
ORcitrixnetscalerRange48.0.0≥
ORcitrixnetscaler_gatewayRange13.1≥
ORcitrixnetscaler_gatewayRange≤49.13
ORcitrixnetscaler_gatewayRange14.0.0≥
ORcitrixnetscaler_gatewayRange15.0.0≥
ORcitrixnetscaler_gatewayRange16.0.0≥
ORcitrixnetscaler_gatewayRange17.0.0≥
ORcitrixnetscaler_gatewayRange18.0.0≥
ORcitrixnetscaler_gatewayRange19.0.0≥
ORcitrixnetscaler_gatewayRange20.0.0≥
ORcitrixnetscaler_gatewayRange21.0.0≥
ORcitrixnetscaler_gatewayRange22.0.0≥
ORcitrixnetscaler_gatewayRange23.0.0≥
ORcitrixnetscaler_gatewayRange24.0.0≥
ORcitrixnetscaler_gatewayRange25.0.0≥
ORcitrixnetscaler_gatewayRange26.0.0≥
ORcitrixnetscaler_gatewayRange27.0.0≥
ORcitrixnetscaler_gatewayRange28.0.0≥
ORcitrixnetscaler_gatewayRange29.0.0≥
ORcitrixnetscaler_gatewayRange30.0.0≥
ORcitrixnetscaler_gatewayRange31.0.0≥
ORcitrixnetscaler_gatewayRange32.0.0≥
ORcitrixnetscaler_gatewayRange33.0.0≥
ORcitrixnetscaler_gatewayRange34.0.0≥
ORcitrixnetscaler_gatewayRange35.0.0≥
ORcitrixnetscaler_gatewayRange36.0.0≥
ORcitrixnetscaler_gatewayRange37.0.0≥
ORcitrixnetscaler_gatewayRange38.0.0≥
ORcitrixnetscaler_gatewayRange39.0.0≥
ORcitrixnetscaler_gatewayRange40.0.0≥
ORcitrixnetscaler_gatewayRange41.0.0≥
ORcitrixnetscaler_gatewayRange42.0.0≥
ORcitrixnetscaler_gatewayRange43.0.0≥
ORcitrixnetscaler_gatewayRange44.0.0≥
ORcitrixnetscaler_gatewayRange45.0.0≥
ORcitrixnetscaler_gatewayRange46.0.0≥
ORcitrixnetscaler_gatewayRange47.0.0≥
ORcitrixnetscaler_gatewayRange48.0.0≥
ORcitrixnetscalerRange13.0≥
ORcitrixnetscalerRange≤91.13
ORcitrixnetscalerRange14.0.0≥
ORcitrixnetscalerRange15.0.0≥
ORcitrixnetscalerRange16.0.0≥
ORcitrixnetscalerRange17.0.0≥
ORcitrixnetscalerRange18.0.0≥
ORcitrixnetscalerRange19.0.0≥
ORcitrixnetscalerRange20.0.0≥
ORcitrixnetscalerRange21.0.0≥
ORcitrixnetscalerRange22.0.0≥
ORcitrixnetscalerRange23.0.0≥
ORcitrixnetscalerRange24.0.0≥
ORcitrixnetscalerRange25.0.0≥
ORcitrixnetscalerRange26.0.0≥
ORcitrixnetscalerRange27.0.0≥
ORcitrixnetscalerRange28.0.0≥
ORcitrixnetscalerRange29.0.0≥
ORcitrixnetscalerRange30.0.0≥
ORcitrixnetscalerRange31.0.0≥
ORcitrixnetscalerRange32.0.0≥
ORcitrixnetscalerRange33.0.0≥
ORcitrixnetscalerRange34.0.0≥
ORcitrixnetscalerRange35.0.0≥
ORcitrixnetscalerRange36.0.0≥
ORcitrixnetscalerRange37.0.0≥
ORcitrixnetscalerRange38.0.0≥
ORcitrixnetscalerRange39.0.0≥
ORcitrixnetscalerRange40.0.0≥
ORcitrixnetscalerRange41.0.0≥
ORcitrixnetscalerRange42.0.0≥
ORcitrixnetscalerRange43.0.0≥
ORcitrixnetscalerRange44.0.0≥
ORcitrixnetscalerRange45.0.0≥
ORcitrixnetscalerRange46.0.0≥
ORcitrixnetscalerRange47.0.0≥
ORcitrixnetscalerRange48.0.0≥
ORcitrixnetscalerRange49.0.0≥
ORcitrixnetscalerRange50.0.0≥
ORcitrixnetscalerRange51.0.0≥
ORcitrixnetscalerRange52.0.0≥
ORcitrixnetscalerRange53.0.0≥
ORcitrixnetscalerRange54.0.0≥
ORcitrixnetscalerRange55.0.0≥
ORcitrixnetscalerRange56.0.0≥
ORcitrixnetscalerRange57.0.0≥
ORcitrixnetscalerRange58.0.0≥
ORcitrixnetscalerRange59.0.0≥
ORcitrixnetscalerRange60.0.0≥
ORcitrixnetscalerRange61.0.0≥
ORcitrixnetscalerRange62.0.0≥
ORcitrixnetscalerRange63.0.0≥
ORcitrixnetscalerRange64.0.0≥
ORcitrixnetscalerRange65.0.0≥
ORcitrixnetscalerRange66.0.0≥
ORcitrixnetscalerRange67.0.0≥
ORcitrixnetscalerRange68.0.0≥
ORcitrixnetscalerRange69.0.0≥
ORcitrixnetscalerRange70.0.0≥
ORcitrixnetscalerRange71.0.0≥
ORcitrixnetscalerRange72.0.0≥
ORcitrixnetscalerRange73.0.0≥
ORcitrixnetscalerRange74.0.0≥
ORcitrixnetscalerRange75.0.0≥
ORcitrixnetscalerRange76.0.0≥
ORcitrixnetscalerRange77.0.0≥
ORcitrixnetscalerRange78.0.0≥
ORcitrixnetscalerRange79.0.0≥
ORcitrixnetscalerRange80.0.0≥
ORcitrixnetscalerRange81.0.0≥
ORcitrixnetscalerRange82.0.0≥
ORcitrixnetscalerRange83.0.0≥
ORcitrixnetscalerRange84.0.0≥
ORcitrixnetscalerRange85.0.0≥
ORcitrixnetscalerRange86.0.0≥
ORcitrixnetscalerRange87.0.0≥
ORcitrixnetscalerRange88.0.0≥
ORcitrixnetscalerRange89.0.0≥
ORcitrixnetscalerRange90.0.0≥
ORcitrixnetscaler_gatewayRange13.0≥
ORcitrixnetscaler_gatewayRange≤91.13
ORcitrixnetscaler_gatewayRange14.0.0≥
ORcitrixnetscaler_gatewayRange15.0.0≥
ORcitrixnetscaler_gatewayRange16.0.0≥
ORcitrixnetscaler_gatewayRange17.0.0≥
ORcitrixnetscaler_gatewayRange18.0.0≥
ORcitrixnetscaler_gatewayRange19.0.0≥
ORcitrixnetscaler_gatewayRange20.0.0≥
ORcitrixnetscaler_gatewayRange21.0.0≥
ORcitrixnetscaler_gatewayRange22.0.0≥
ORcitrixnetscaler_gatewayRange23.0.0≥
ORcitrixnetscaler_gatewayRange24.0.0≥
ORcitrixnetscaler_gatewayRange25.0.0≥
ORcitrixnetscaler_gatewayRange26.0.0≥
ORcitrixnetscaler_gatewayRange27.0.0≥
ORcitrixnetscaler_gatewayRange28.0.0≥
ORcitrixnetscaler_gatewayRange29.0.0≥
ORcitrixnetscaler_gatewayRange30.0.0≥
ORcitrixnetscaler_gatewayRange31.0.0≥
ORcitrixnetscaler_gatewayRange32.0.0≥
ORcitrixnetscaler_gatewayRange33.0.0≥
ORcitrixnetscaler_gatewayRange34.0.0≥
ORcitrixnetscaler_gatewayRange35.0.0≥
ORcitrixnetscaler_gatewayRange36.0.0≥
ORcitrixnetscaler_gatewayRange37.0.0≥
ORcitrixnetscaler_gatewayRange38.0.0≥
ORcitrixnetscaler_gatewayRange39.0.0≥
ORcitrixnetscaler_gatewayRange40.0.0≥
ORcitrixnetscaler_gatewayRange41.0.0≥
ORcitrixnetscaler_gatewayRange42.0.0≥
ORcitrixnetscaler_gatewayRange43.0.0≥
ORcitrixnetscaler_gatewayRange44.0.0≥
ORcitrixnetscaler_gatewayRange45.0.0≥
ORcitrixnetscaler_gatewayRange46.0.0≥
ORcitrixnetscaler_gatewayRange47.0.0≥
ORcitrixnetscaler_gatewayRange48.0.0≥
ORcitrixnetscaler_gatewayRange49.0.0≥
ORcitrixnetscaler_gatewayRange50.0.0≥
ORcitrixnetscaler_gatewayRange51.0.0≥
ORcitrixnetscaler_gatewayRange52.0.0≥
ORcitrixnetscaler_gatewayRange53.0.0≥
ORcitrixnetscaler_gatewayRange54.0.0≥
ORcitrixnetscaler_gatewayRange55.0.0≥
ORcitrixnetscaler_gatewayRange56.0.0≥
ORcitrixnetscaler_gatewayRange57.0.0≥
ORcitrixnetscaler_gatewayRange58.0.0≥
ORcitrixnetscaler_gatewayRange59.0.0≥
ORcitrixnetscaler_gatewayRange60.0.0≥
ORcitrixnetscaler_gatewayRange61.0.0≥
ORcitrixnetscaler_gatewayRange62.0.0≥
ORcitrixnetscaler_gatewayRange63.0.0≥
ORcitrixnetscaler_gatewayRange64.0.0≥
ORcitrixnetscaler_gatewayRange65.0.0≥
ORcitrixnetscaler_gatewayRange66.0.0≥
ORcitrixnetscaler_gatewayRange67.0.0≥
ORcitrixnetscaler_gatewayRange68.0.0≥
ORcitrixnetscaler_gatewayRange69.0.0≥
ORcitrixnetscaler_gatewayRange70.0.0≥
ORcitrixnetscaler_gatewayRange71.0.0≥
ORcitrixnetscaler_gatewayRange72.0.0≥
ORcitrixnetscaler_gatewayRange73.0.0≥
ORcitrixnetscaler_gatewayRange74.0.0≥
ORcitrixnetscaler_gatewayRange75.0.0≥
ORcitrixnetscaler_gatewayRange76.0.0≥
ORcitrixnetscaler_gatewayRange77.0.0≥
ORcitrixnetscaler_gatewayRange78.0.0≥
ORcitrixnetscaler_gatewayRange79.0.0≥
ORcitrixnetscaler_gatewayRange80.0.0≥
ORcitrixnetscaler_gatewayRange81.0.0≥
ORcitrixnetscaler_gatewayRange82.0.0≥
ORcitrixnetscaler_gatewayRange83.0.0≥
ORcitrixnetscaler_gatewayRange84.0.0≥
ORcitrixnetscaler_gatewayRange85.0.0≥
ORcitrixnetscaler_gatewayRange86.0.0≥
ORcitrixnetscaler_gatewayRange87.0.0≥
ORcitrixnetscaler_gatewayRange88.0.0≥
ORcitrixnetscaler_gatewayRange89.0.0≥
ORcitrixnetscaler_gatewayRange90.0.0≥
ORcitrixnetscalerRange≤13.1
ORcitrixnetscalerRange≤12.1
ORcitrixnetscalerRange≤12.1
Related
ics
ics
Threat Actors Exploiting Citrix CVE-2023-3519 to Implant Webshells
2023-07-20 12:00:00
nessus
nessus
Citrix ADC and Citrix Gateway Multiple Vulnerabilities (CTX561482)
2023-07-18 00:00:00
rapid7blog
rapid7blog
What’s New in InsightVM and Nexpose: Q3 2023 in Review
2023-09-29 19:42:26
Metasploit weekly wrap-up
2023-08-11 15:22:20
thn
thn
Zero-Day Attacks Exploited Critical Vulnerability in Citrix ADC and Gateway
2023-07-19 03:21:00
Citrix NetScaler Alert: Ransomware Hackers Exploiting Critical Vulnerability
2023-08-29 09:17:00
Nearly 2,000 Citrix NetScaler Instances Hacked via Critical Vulnerability
2023-08-16 04:20:00
prion
prion
Remote code execution
2023-07-19 18:15:00
Cross site scripting
2023-07-19 19:15:00
Privilege escalation
2023-07-19 19:15:00
saint
saint
Citrix ADC nsppe buffer overflow
2023-08-09 00:00:00
Citrix ADC nsppe buffer overflow
2023-08-09 00:00:00
attackerkb
attackerkb
CVE-2023-3519
2023-07-31 00:00:00
cve
cve
githubexploit
githubexploit
impervablog
impervablog
CVE-2023-3519: NetScaler (Citrix) RCE Blocked By Imperva
2023-07-23 09:46:23
malwarebytes
malwarebytes
A week in security (July 17 - 23)
2023-07-24 02:00:00
Citrix NetScalers backdoored in widespread exploitation campaign
2023-08-17 01:00:00
nvd
nvd
metasploit
metasploit
Citrix ADC (NetScaler) Forms SSO Target RCE
2023-07-31 21:30:52
packetstorm
packetstorm
Citrix ADC (NetScaler) Remote Code Execution
2023-08-04 00:00:00
cvelist
cvelist
cisa_kev
cisa_kev
Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
2023-07-19 00:00:00
zdt
zdt
Citrix ADC (NetScaler) Remote Code Execution Exploit
2023-08-08 00:00:00
trellix
trellix
The Bug Report - July 2023 Edition
2023-08-02 00:00:00
The Bug Report - July 2023 Edition
2023-08-02 00:00:00
securelist
securelist
IT threat evolution in Q3 2023. Non-mobile statistics
2023-12-01 10:00:03
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.912 High
EPSS
Percentile
98.9%
Related for CTX561482