CVE-2023-4967

Summary

Denial of Service in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA Virtual Server

Affected Software

VendorProductVersion RangeStatus
Cloud Software GroupNetScaler ADC14.1 < 8.50affected
Cloud Software GroupNetScaler ADC13.1 < 49.15affected
Cloud Software GroupNetScaler ADC13.0 < 92.19affected
Cloud Software GroupNetScaler ADC13.1-FIPS < 37.164affected
Cloud Software GroupNetScaler ADC12.1-FIPS < 55.300affected
Cloud Software GroupNetScaler ADC12.1-NDcPP < 55.300affected
Cloud Software GroupNetScaler Gateway14.1 < 8.50affected
Cloud Software GroupNetScaler Gateway13.1 < 49.15affected
Cloud Software GroupNetScaler Gateway13.0 < 92.19affected

Weaknesses

  • CWE-119: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References