Lucene search

CitrixCVE-2023-3519

HistoryJul 19, 2023 - 6:15 p.m.

CVE-2023-3519

2023-07-1918:15:11

CWE-94

Citrix

web.nvd.nist.gov

986

In Wild

nvd

cve

unauthenticated

remote code execution

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.966

Percentile

99.7%

JSON

Unauthenticated remote code execution

Affected configurations

Nvd

Node

citrixnetscaler_application_delivery_controllerRange12.1–12.1-55.297fips

citrixnetscaler_application_delivery_controllerRange12.1–12.1-55.297ndcpp

citrixnetscaler_application_delivery_controllerRange13.0–13.0-91.13-

citrixnetscaler_application_delivery_controllerRange13.1–13.1-37.159fips

citrixnetscaler_application_delivery_controllerRange13.1–13.1-49.13-

citrixnetscaler_application_delivery_controllerMatch11.1-65.22fips

citrixnetscaler_gatewayRange13.0–13.0-91.13

citrixnetscaler_gatewayRange13.1–13.1-49.13

VendorProductVersionCPE
citrixnetscaler_application_delivery_controller*cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*
citrixnetscaler_application_delivery_controller*cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*
citrixnetscaler_application_delivery_controller*cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*
citrixnetscaler_application_delivery_controller11.1-65.22cpe:2.3:a:citrix:netscaler_application_delivery_controller:11.1-65.22:*:*:*:fips:*:*:*
citrixnetscaler_gateway*cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
citrix	netscaler_application_delivery_controller	*	cpe:2.3:a:citrix:netscaler_application_delivery_controller:::::fips:::*
citrix	netscaler_application_delivery_controller	*	cpe:2.3:a:citrix:netscaler_application_delivery_controller:::::ndcpp:::*
citrix	netscaler_application_delivery_controller	*	cpe:2.3:a:citrix:netscaler_application_delivery_controller:::::-:::*
citrix	netscaler_application_delivery_controller	11.1-65.22	cpe:2.3:a:citrix:netscaler_application_delivery_controller:11.1-65.22::::fips:::
citrix	netscaler_gateway	*	cpe:2.3:a:citrix:netscaler_gateway::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "NetScaler ADC ",
    "vendor": "Citrix",
    "versions": [
      {
        "lessThan": "49.13",
        "status": "affected",
        "version": "13.1",
        "versionType": "patch"
      },
      {
        "lessThan": "91.13",
        "status": "affected",
        "version": "13.0",
        "versionType": "patch"
      },
      {
        "lessThan": "37.159",
        "status": "affected",
        "version": "13.1-FIPS",
        "versionType": "patch"
      },
      {
        "lessThan": "55.297",
        "status": "affected",
        "version": "12.1-FIPS",
        "versionType": "patch"
      },
      {
        "lessThan": "55.297",
        "status": "affected",
        "version": "12.1-NDcPP",
        "versionType": "patch"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "NetScaler Gateway",
    "vendor": "Citrix",
    "versions": [
      {
        "lessThan": "49.13",
        "status": "affected",
        "version": "13.1",
        "versionType": "patch"
      },
      {
        "lessThan": "91.13",
        "status": "affected",
        "version": "13.0",
        "versionType": "patch"
      }
    ]
  }
]