An unauthenticated, network-reachable flaw in NetScaler ADC and Gateway lets attackers crash or disrupt the appliance without logging in, and it’s already listed as exploited in the wild.
Posts tagged: Citrix
Citrix NetScaler Improper Input Validation Vulnerability
An unauthenticated attacker can run arbitrary commands on NetScaler ADC and Gateway devices below the listed fixed builds, and CISA confirms this is already being exploited in the wild.
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
An unauthenticated, network-reachable memory buffer flaw in NetScaler ADC and Gateway can crash the appliance or let an attacker run code on it, and it’s already being exploited in the wild.
Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
An unauthenticated attacker reaching a NetScaler AAA virtual server or Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) can walk straight past the login step, and CISA confirms this is already being exploited.