2 lines
5.3 KiB
JSON
2 lines
5.3 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"NetScaler ADC","vendor":"Citrix","versions":[{"lessThan":"49.13","status":"affected","version":"13.1","versionType":"patch"},{"lessThan":"91.13","status":"affected","version":"13.0","versionType":"patch"},{"lessThan":"37.159","status":"affected","version":"13.1-FIPS","versionType":"patch"},{"lessThan":"55.297","status":"affected","version":"12.1-FIPS","versionType":"patch"},{"lessThan":"55.297","status":"affected","version":"12.1-NDcPP","versionType":"patch"}]},{"defaultStatus":"unaffected","product":"NetScaler Gateway","vendor":"Citrix","versions":[{"lessThan":"49.13","status":"affected","version":"13.1","versionType":"patch"},{"lessThan":"91.13","status":"affected","version":"13.0","versionType":"patch"}]}],"source":"secure@citrix.com"}],"cisaActionDue":"2023-08-09","cisaExploitAdd":"2023-07-19","cisaRequiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","matchCriteriaId":"8927B2FA-F87E-4D81-AC29-9032184ECB7E","versionEndExcluding":"12.1-55.297","versionStartIncluding":"12.1","vulnerable":true},{"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","matchCriteriaId":"9845E7B1-5604-497D-8241-048E91987C13","versionEndExcluding":"12.1-55.297","versionStartIncluding":"12.1","vulnerable":true},{"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","matchCriteriaId":"AD949674-8DC1-4B0D-8C0C-F593539E12F1","versionEndExcluding":"13.0-91.13","versionStartIncluding":"13.0","vulnerable":true},{"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","matchCriteriaId":"BD0739E3-F7A4-463C-96B0-9D7BDBF218C4","versionEndExcluding":"13.1-37.159","versionStartIncluding":"13.1","vulnerable":true},{"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","matchCriteriaId":"FCEED8AC-F9A9-4F75-BB32-F53967A8E9A0","versionEndExcluding":"13.1-49.13","versionStartIncluding":"13.1","vulnerable":true},{"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","matchCriteriaId":"BC825A83-8D84-42C7-868F-0470FF79D497","versionEndExcluding":"13.0-91.13","versionStartIncluding":"13.0","vulnerable":true},{"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","matchCriteriaId":"442F6925-199D-4E5B-84C1-05C4D8108B62","versionEndExcluding":"13.1-49.13","versionStartIncluding":"13.1","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Unauthenticated remote code execution"}],"id":"CVE-2023-3519","lastModified":"2026-08-05T05:16:39.130","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"secure@citrix.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-3519","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2023-07-19T00:00:00+00:00","version":"2.0.3"}}]},"published":"2023-07-19T18:15:11.513","references":[{"source":"secure@citrix.com","tags":["Exploit","Third Party Advisory","VDB Entry"],"url":"http://packetstormsecurity.com/files/173997/Citrix-ADC-NetScaler-Remote-Code-Execution.html"},{"source":"secure@citrix.com","tags":["Vendor Advisory"],"url":"https://support.citrix.com/article/CTX561482/citrix-adc-and-citrix-gateway-security-bulletin-for-cve20233519-cve20233466-cve20233467"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"],"url":"http://packetstormsecurity.com/files/173997/Citrix-ADC-NetScaler-Remote-Code-Execution.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.citrix.com/article/CTX561482/citrix-adc-and-citrix-gateway-security-bulletin-for-cve20233519-cve20233466-cve20233467"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-3519"}],"sourceIdentifier":"secure@citrix.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-94"}],"source":"secure@citrix.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-94"}],"source":"nvd@nist.gov","type":"Primary"}]}
|