Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

[ Why it matters ]Priority signals

• Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2024-01-17

[ Description ]Official description

Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.

CISA: Citrix NetScaler ADC and NetScaler Gateway contain a code injection vulnerability that allows for authenticated remote code execution on the management interface with access to NSIP, CLIP, or SNIP.

[ Fixes ]Fixes and patches

CISA required action (US federal deadline 24 Jan 2024): Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References

• support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulle…Vendor Advisory
• www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource