Citrix · NetScaler ADC and NetScaler Gateway
CVE-2023-4966
Unauthenticated sensitive information disclosure
O que é
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
CISA: Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
O que fazer
Apply mitigations and kill all active and persistent sessions per vendor instructions [https://www.netscaler.com/blog/news/cve-2023-4966-critical-security-update-now-available-for-netscaler-adc-and-netscaler-gateway/] OR discontinue use of the product if mitigations are unavailable.
Prazo para as agências federais dos EUA: 8 de novembro de 2023
Mais falhas exploradas de Citrix
| Adicionado | Vulnerabilidade | Produto | Gravidade | Chance de ataque |
|---|---|---|---|---|
| 26 de ago. de 2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer | NetScaler ADC and NetScaler Gateway | Alto 8,8 | 1,0% |
| 17 de jan. de 2024 | Code Injection | NetScaler ADC and NetScaler Gateway | Média 5,5 | 3,2% |
| 17 de jan. de 2024 | Buffer Overflow | NetScaler ADC and NetScaler Gateway | Alto 8,2 | 58% |
| 19 de jul. de 2023 | Code Injection | NetScaler ADC and NetScaler Gateway | Crítica 9,8 | 99,7% |
| 4 de out. de 2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer | NetScaler | Alto 8,7 | 11% |
| 27 de set. de 2026 | Improper Input Validation | NetScaler | Crítica 9,5 | 82% |
| 27 de set. de 2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer | NetScaler | Crítica 9,5 | 78% |
| 9 de set. de 2026 | Authentication Bypass Using an Alternate Path or Channel | NetScaler | Crítica 9,3 | 33% |
Fontes: Known Exploited Vulnerabilities (CISA, domínio público), CVE records (cve.org) e EPSS (FIRST). A chance de ataque é a estimativa EPSS de que alguém tente explorar a falha nos próximos 30 dias.