HomeCitrixCVE-2023-6549

CVE-2023-6549

HIGH
8.2CVSS
Published: 2024-01-17
Updated: 2025-10-24
AI Analysis

Description

Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read

CVSS Metrics

Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Attack Vector
network
Complexity
low
Privileges
none
User Action
none
Scope
unchanged
Confidentiality
none
Integrity
low
Availability
high
Weaknesses
CWE-119CWE-119

Metadata

Primary Vendor
CITRIX
Published
1/17/2024
Last Modified
10/24/2025
Source
NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

citrix : netscaler_application_delivery_controllercitrix : netscaler_application_delivery_controllercitrix : netscaler_application_delivery_controllercitrix : netscaler_application_delivery_controllercitrix : netscaler_application_delivery_controllercitrix : netscaler_application_delivery_controllercitrix : netscaler_gatewaycitrix : netscaler_gatewaycitrix : netscaler_gateway

AI-Powered Remediation

Generate remediation guidance or a C-suite brief for this vulnerability.

Executive Intelligence Brief