Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2023-6548

Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to p

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Citrix

Description

Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cloud Software Group NetScaler ADC

Default version status: unaffected

  • 14.1 to < 12.35affected
  • 13.1 to < 51.15affected
  • 13.0 to < 92.21affected
  • 13.1-FIPS to < 37.176affected
  • 12.1-FIPS to < 55.302affected
  • 12.1-NDcPP to < 55.302affected

Cloud Software Group NetScaler Gateway

Default version status: unaffected

  • 14.1 to < 12.35affected
  • 13.1 to < 51.15affected
  • 13.0 to < 92.21affected

References