Citrix Alert
2348Warning Date
Severity Level
Warning Number
Target Sector
18 July, 2023
● Critical
2023-5677
All
Citrix has released security updates to address multiple vulnerabilities in the following products:
- NetScaler ADC and NetScaler Gateway 13.1 before 13.1-49.13
- NetScaler ADC and NetScaler Gateway 13.0 before 13.0-91.13
- NetScaler ADC 13.1-FIPS before 13.1-37.159
- NetScaler ADC 12.1-FIPS before 12.1-65.36
- NetScaler ADC 12.1-NDcPP before 12.65.36
An attacker could exploit these vulnerabilities by doing the following:
- Unauthenticated Remote Code Execution
- Privilege Escalation
- Cross Site-Scripting (XSS)
The CERT team encourages users to review Citrix security advisory and update the affected products: