Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
Citrix · NetScaler ADC and NetScaler Gateway
Date added (CISA)
2023-10-18
Remediation due
2023-11-08
Known ransomware use
Yes
Remediation priority
P1 — known ransomware use · past CISA due date
Description
Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.