CVE-2023-6549

2024-01-1720:15:53

CWE-119

Citrix

www.cve.org

cve-2023-6549

denial of service

out-of-bounds memory read

netscaler adc

netscaler gateway

unauthenticated

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

8.5 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

81.0%

JSON

Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "NetScaler ADC ",
    "vendor": "Cloud Software Group",
    "versions": [
      {
        "lessThan": "12.35",
        "status": "affected",
        "version": "14.1",
        "versionType": "patch"
      },
      {
        "lessThan": "51.15",
        "status": "affected",
        "version": "13.1",
        "versionType": "patch"
      },
      {
        "lessThan": "92.21",
        "status": "affected",
        "version": "13.0 ",
        "versionType": "patch"
      },
      {
        "lessThan": "37.176",
        "status": "affected",
        "version": " 13.1-FIPS",
        "versionType": "patch"
      },
      {
        "lessThan": "55.302",
        "status": "affected",
        "version": "12.1-FIPS",
        "versionType": "patch"
      },
      {
        "lessThan": "55.302",
        "status": "affected",
        "version": "12.1-NDcPP",
        "versionType": "patch"
      }
    ]
  }
]