CVE-2023-3519

Published Jul 19, 2023

Last updated 3 months ago

Exploit known CVSS critical 9.8

VDI

web application

Network

Zero-day

API

SSL

Supply chain

VPN

Server

HTTP

Overview

AI description

Automated description summarized from trusted sources.

CVE-2023-3519 is an unauthenticated remote code execution (RCE) vulnerability impacting Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway products. This flaw allows attackers to execute arbitrary code over the network without requiring authentication. The vulnerability is rooted in the improper handling of user inputs, specifically a lack of proper input validation, which enables command injection opportunities. For an appliance to be susceptible to exploitation, it must be configured as a Gateway (such as for VPN, ICA Proxy, CVP, or RDP Proxy) or an AAA virtual server. Exploitation of this vulnerability can lead to a full system compromise.

Description: Unauthenticated remote code execution
Source: secure@citrix.com
NVD status: Analyzed
Products: netscaler_application_delivery_controller, netscaler_gateway

Risk scores

CVSS 3.1

Type: Primary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Known exploits

Data from CISA

Vulnerability name: Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
Exploit added on: Jul 19, 2023
Exploit action due: Aug 9, 2023
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Weaknesses

secure@citrix.com: CWE-94
nvd@nist.gov: CWE-94

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
            "matchCriteriaId": "8927B2FA-F87E-4D81-AC29-9032184ECB7E",
            "versionEndExcluding": "12.1-55.297",
            "versionStartIncluding": "12.1",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*",
            "matchCriteriaId": "9845E7B1-5604-497D-8241-048E91987C13",
            "versionEndExcluding": "12.1-55.297",
            "versionStartIncluding": "12.1",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
            "matchCriteriaId": "AD949674-8DC1-4B0D-8C0C-F593539E12F1",
            "versionEndExcluding": "13.0-91.13",
            "versionStartIncluding": "13.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
            "matchCriteriaId": "BD0739E3-F7A4-463C-96B0-9D7BDBF218C4",
            "versionEndExcluding": "13.1-37.159",
            "versionStartIncluding": "13.1",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
            "matchCriteriaId": "FCEED8AC-F9A9-4F75-BB32-F53967A8E9A0",
            "versionEndExcluding": "13.1-49.13",
            "versionStartIncluding": "13.1",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "BC825A83-8D84-42C7-868F-0470FF79D497",
            "versionEndExcluding": "13.0-91.13",
            "versionStartIncluding": "13.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "442F6925-199D-4E5B-84C1-05C4D8108B62",
            "versionEndExcluding": "13.1-49.13",
            "versionStartIncluding": "13.1",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.