Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.
CISA has listed this vulnerability in the Known Exploited Vulnerabilities catalog.
Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.
Confirm exposure before applying a vendor-supported change.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due date: 2024.01.24Confirm that Citrix NetScaler ADC and NetScaler Gateway and an affected version are present.
Combine exploitation signals with asset exposure and business criticality.
Follow the vendor advisory or supported update path and preserve rollback options.
Recheck the version, service health, access paths, and relevant logs.
