9621 Agnes Crossing, Lake Suzanneview, New Mexico Island 84604-9295.
Multiple versions of the Netscaler ADC and Gateway management interface are vulnerable to a newly discovered flaw that is already being exploited by hackers today. Citrix encourages customers
Multiple versions of the Netscaler ADC and Gateway management interface are vulnerable to a newly discovered flaw that is already being exploited by hackers today.
Citrix encourages customers to immediately install the latest updates for Netscaler ADC and Gateway appliances. Two newly discovered vulnerabilities affect the management interface of these devices. Attackers can use the bugs to execute their own code or carry out a DDoS attack.
The culprits in question are CVE-2023-6548 with a score of 5.5. This error allows code execution. Then there is CVE-2023-6549 with a score of 8.2. This vulnerability allows DDoS attacks.
The criminals can’t just get started. To exploit the flaws, hackers need access to an account (with low privileges, just like access to NSIP, CLIP or SNIP with access to the management interface). Additionally, vulnerable devices must be configured as a gateway or AAA virtual server to be vulnerable to DDoS attacks.
The following versions are vulnerable:
Citrix says it has already released patches. Administrators should install them as soon as possible because Citrix has already discovered attacks targeting the flaws.
Source: IT Daily
As an experienced journalist and author, Mary has been reporting on the latest news and trends for over 5 years. With a passion for uncovering the stories behind the headlines, Mary has earned a reputation as a trusted voice in the world of journalism. Her writing style is insightful, engaging and thought-provoking, as she takes a deep dive into the most pressing issues of our time.
