2 lines
6.2 KiB
JSON
2 lines
6.2 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"NetScaler ADC","vendor":"Citrix","versions":[{"lessThan":"8.50","status":"affected","version":"14.1","versionType":"patch"},{"lessThan":"49.15","status":"affected","version":"13.1","versionType":"patch"},{"lessThan":"92.19","status":"affected","version":"13.0","versionType":"patch"},{"lessThan":"37.164","status":"affected","version":"13.1-FIPS","versionType":"patch"},{"lessThan":"55.300","status":"affected","version":"12.1-FIPS","versionType":"patch"},{"lessThan":"55.300","status":"affected","version":"12.1-NDcPP","versionType":"patch"}]},{"defaultStatus":"unaffected","product":"NetScaler Gateway","vendor":"Citrix","versions":[{"lessThan":"8.50","status":"affected","version":"14.1","versionType":"patch"},{"lessThan":"49.15","status":"affected","version":"13.1","versionType":"patch"},{"lessThan":"92.19","status":"affected","version":"13.0","versionType":"patch"}]}],"source":"secure@citrix.com"}],"cisaActionDue":"2023-11-08","cisaExploitAdd":"2023-10-18","cisaRequiredAction":"Apply mitigations and kill all active and persistent sessions per vendor instructions [https://www.netscaler.com/blog/news/cve-2023-4966-critical-security-update-now-available-for-netscaler-adc-and-netscaler-gateway/] OR discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","matchCriteriaId":"492BEB4B-7A4B-47C2-93D1-2B0683AA3A20","versionEndExcluding":"12.1-55.300","versionStartIncluding":"12.1","vulnerable":true},{"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","matchCriteriaId":"81EF12C2-4197-4C0D-BE11-556F05DAD646","versionEndExcluding":"12.1-55.300","versionStartIncluding":"12.1","vulnerable":true},{"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","matchCriteriaId":"9EEC53B2-686A-4C6F-98DE-5D6AE804B0A8","versionEndExcluding":"13.0-92.19","versionStartIncluding":"13.0","vulnerable":true},{"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","matchCriteriaId":"109301A8-9ADD-4A49-9C45-D21A4DA840E9","versionEndExcluding":"13.1-37.164","versionStartIncluding":"13.1","vulnerable":true},{"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","matchCriteriaId":"5C1739C5-48C1-46BC-A524-B4CC4C5B6436","versionEndExcluding":"13.1-49.15","versionStartIncluding":"13.1","vulnerable":true},{"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","matchCriteriaId":"9148C36D-98B4-4166-8B9A-449EA86BA4B1","versionEndExcluding":"14.1-8.50","versionStartIncluding":"14.1","vulnerable":true},{"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","matchCriteriaId":"5FB1412D-F8D8-4592-A8A9-C1B841B93D5E","versionEndExcluding":"13.0-92.19","versionStartIncluding":"13.0","vulnerable":true},{"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","matchCriteriaId":"28A08B32-D145-499F-866E-BEEEDEBB2901","versionEndExcluding":"13.1-49.15","versionStartIncluding":"13.1","vulnerable":true},{"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","matchCriteriaId":"4F1610E6-FE48-4339-8E74-765E0517E33D","versionEndExcluding":"14.1-8.50","versionStartIncluding":"14.1","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server."},{"lang":"es","value":"Divulgación de información confidencial en NetScaler ADC y NetScaler Gateway cuando se configura como Gateway (servidor virtual VPN, ICA Proxy, CVPN, RDP Proxy) o servidor \"virtual\" AAA."}],"id":"CVE-2023-4966","lastModified":"2026-07-31T04:16:44.230","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":9.4,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.5,"source":"secure@citrix.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-4966","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2023-10-10T00:00:00+00:00","version":"2.0.3"}}]},"published":"2023-10-10T14:15:10.977","references":[{"source":"secure@citrix.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://packetstormsecurity.com/files/175323/Citrix-Bleed-Session-Token-Leakage-Proof-Of-Concept.html"},{"source":"secure@citrix.com","tags":["Vendor Advisory"],"url":"https://support.citrix.com/article/CTX579459"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://packetstormsecurity.com/files/175323/Citrix-Bleed-Session-Token-Leakage-Proof-Of-Concept.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.citrix.com/article/CTX579459"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4966"}],"sourceIdentifier":"secure@citrix.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-119"}],"source":"secure@citrix.com","type":"Secondary"},{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|