CVE-2023-6548

KEVCitrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

Description

Citrix NetScaler ADC and NetScaler Gateway contain a code injection vulnerability that allows for authenticated remote code execution on the management interface with access to NSIP, CLIP, or SNIP.

Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.

CVSS 3.1 vectorCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

PublishedJan 17, 2024

Last modifiedJun 17, 2026

Added to KEVJan 17, 2024

Remediation dueJan 24, 2024

References

support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549Vendor Advisory
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-6548US Government Resource

0 recent articles mention this CVE

Risk assessment · Medium

Actively exploited. Patch immediately.

Exploitation: Confirmed in the wild (CISA KEV)
Federal remediation deadline: Overdue by 1006 days
CVSS: 5.5 MEDIUM
EPSS (30-day exploit probability): 3.2% · top 12% of all CVEs
Weakness: CWE-94

Recommended actions

1.Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
2.Treat as emergency change: patch or isolate internet-facing instances first.
3.Hunt for compromise: review logs for the disclosure window, not just from the patch date.

Assessment is derived automatically from the live signals above; verify against your own asset inventory.