coldbraid

CVE-2023-4966 Citrix NetScaler ADC And NetScaler Gateway

Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.

CVSS
not scored

CWE-119

On CISA’s exploited list

Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability

Added
2023-10-18
Federal patch deadline
2023-11-08
Ransomware use
known

Actors known to use it (MITRE ATT&CK)