CVE-2023-6548

CVSS V2 None CVSS V3 None
Description
Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.
Overview
  • CVE ID
  • CVE-2023-6548
  • Assigner
  • Citrix
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-01-17T20:11:18.462Z
  • Last Modified Date
  • 2024-01-18T01:12:54.917Z
Weakness Enumerations
CWE URL
CWE-94 http://cwe.mitre.org/data/definitions/94.html
References
Reference URL Reference Tags
https://support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-6548
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6548
History
Created Old Value New Value Data Type Notes
2024-06-25 05:59:48 Added to TrackCVE