Citrix Netscaler Gateway Vulnerabilidad

Cronología

Versión

10.5	11
11.0	9
10.0	8
10.1	8
10.2	8

Contramedidas

Official Fix	33
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	0

Explotabilidad

High	5
Functional	0
Proof-of-Concept	0
Unproven	2
Not Defined	26

Vector de acceso

Not Defined	0
Physical	0
Local	2
Adjacent	3
Network	28

Autenticación

Not Defined	0
High	1
Low	8
None	24

La interacción del usuario

Not Defined	0
Required	6
None	27

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	4
≤5	2
≤6	6
≤7	9
≤8	7
≤9	3
≤10	2

CVSSv3 Temp

≤1	0
≤2	0
≤3	1
≤4	3
≤5	3
≤6	9
≤7	5
≤8	7
≤9	3
≤10	2

VulDB

≤1	0
≤2	0
≤3	1
≤4	4
≤5	2
≤6	6
≤7	7
≤8	10
≤9	1
≤10	2

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	3
≤7	4
≤8	7
≤9	2
≤10	3

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	1
≤7	0
≤8	1
≤9	3
≤10	1

Proveedor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	1
≤9	1
≤10	1

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explotar día 0

<1k	0
<2k	0
<5k	2
<10k	11
<25k	18
<50k	0
<100k	2
≥100k	0

Explotar hoy

<1k	28
<2k	0
<5k	4
<10k	0
<25k	1
<50k	0
<100k	0
≥100k	0

Explotar el volumen del mercado

Affected Versions (214): 9.3-62, 9.3-62.1, 9.3-62.2, 9.3-62.3, 9.3-62.4, 9.3.66, 9.3.66.1, 9.3.66.2, 9.3.66.3, 9.3.66.4, 10.0, 10.1, 10.1-126, 10.1-126.1, 10.1-126.2, 10.1-126.3, 10.1-126.4, 10.1-126.5, 10.1-126.6, 10.1-126.7, 10.1-126.8, 10.1-126.9, 10.1-126.11, 10.1-126.12, 10.1.123, 10.1.123.1, 10.1.123.2, 10.1.123.3, 10.1.123.4, 10.1.123.5, 10.1.123.6, 10.1.123.7, 10.1.123.8, 10.2, 10.3, 10.4, 10.5, 10.5 Build 55, 10.5 Build 55.1, 10.5 Build 55.2, 10.5 Build 55.3, 10.5 Build 55.4, 10.5 Build 55.5, 10.5 Build 55.6, 10.5 Build 55.7, 10.5 Build 55.8, 10.5.a, 10.5.b, 10.5.c, 10.5.d, 10.5.e, 10.5.e Build 53-9010.a, 10.5.e Build 53-9010.b, 10.5.e Build 53-9010.c, 10.5.e Build 53-9010.d, 10.5.e Build 53-9010.e, 11.0, 11.1, 11.1.1, 11.1.2, 11.1.3, 11.1.4, 11.1.5, 11.1.6, 11.1.7, 11.1.8, 11.1.9, 11.1.11, 11.1.12, 11.1.13, 11.1.14, 11.1.15, 11.1.16, 11.1.17, 11.1.18, 11.1.19, 11.1.21, 11.1.22, 11.1.23, 11.1.24, 11.1.25, 11.1.26, 11.1.27, 11.1.28, 11.1.29, 11.1.31, 11.1.32, 11.1.33, 11.1.34, 11.1.35, 11.1.36, 11.1.37, 11.1.38, 11.1.39, 11.1.41, 11.1.42, 11.1.43, 11.1.44, 11.1.45, 11.1.46, 11.1.47, 11.1.48, 11.1.49, 11.1.51, 11.1.52, 11.1.53, 11.1.54, 11.1.55, 11.1.56, 11.1.57, 11.1.58, 11.1.59, 12, 12.0, 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.0.5, 12.0.6, 12.0.7, 12.0.8, 12.0.9, 12.0.11, 12.0.12, 12.0.13, 12.0.14, 12.0.15, 12.0.16, 12.0.17, 12.0.18, 12.0.19, 12.0.21, 12.0.22, 12.0.23, 12.0.24, 12.0.25, 12.0.26, 12.0.27, 12.0.28, 12.0.29, 12.0.31, 12.0.32, 12.0.33, 12.0.34, 12.0.35, 12.0.36, 12.0.37, 12.0.38, 12.0.39, 12.0.41, 12.0.42, 12.0.43, 12.0.44, 12.0.45, 12.0.46, 12.0.47, 12.0.48, 12.0.49, 12.0.51, 12.0.52, 12.0.53, 12.0.54, 12.0.55, 12.0.56, 12.0.57, 12.0.58, 12.0.59, 12.1, 12.1.1, 12.1.2, 12.1.3, 12.1.4, 12.1.5, 12.1.6, 12.1.7, 12.1.8, 12.1.9, 12.1.11, 12.1.12, 12.1.13, 12.1.14, 12.1.15, 12.1.16, 12.1.17, 12.1.18, 12.1.19, 12.1.21, 12.1.22, 12.1.23, 12.1.24, 12.1.25, 12.1.26, 12.1.27, 12.1.28, 12.1.29, 12.1.31, 12.1.32, 12.1.33, 12.1.34, 12.1.35, 12.1.36, 12.1.37, 12.1.38, 12.1.39, 12.1.41, 12.1.42, 12.1.43, 12.1.44, 12.1.45, 12.1.46, 12.1.47, 12.1.48, 12.1.49

Link to Product Website: https://www.citrix.com/

Tipo de software: Network Management Software

Fecha de publicación	Base	Temp	Vulnerabilidad	0day	Hoy	Exp	Con	CTI	CVE
2024-01-16	7.7	7.6	Citrix NetScaler ADC/NetScaler Gateway desbordamiento de búfer	$5k-$25k	$0-$5k	High	Official Fix	0.00	CVE-2023-6549
2024-01-16	6.9	6.8	Citrix NetScaler ADC/NetScaler Gateway NSIP/CLIP/SNIP escalada de privilegios	$5k-$25k	$0-$5k	High	Official Fix	0.03	CVE-2023-6548
2023-10-27	7.7	7.6	Citrix NetScaler ADC/NetScaler Gateway desbordamiento de búfer	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-4967
2023-10-10	8.3	8.2	Citrix NetScaler ADC/NetScaler Gateway OpenID openid-configuration ns_aaa_oauthrp_send_openid_config CitrixBleed desbordamiento de búfer	$25k-$100k	$0-$5k	High	Official Fix	0.09	CVE-2023-4966
2023-07-18	9.8	9.6	Citrix NetScaler ADC/NetScaler Gateway escalada de privilegios	$25k-$100k	$5k-$25k	High	Official Fix	0.00	CVE-2023-3519
2023-07-18	8.0	7.9	Citrix NetScaler ADC/NetScaler Gateway Management Interface escalada de privilegios	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2023-3467
2023-07-18	6.4	6.4	Citrix NetScaler ADC/NetScaler Gateway cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-3466
2021-06-16	3.1	3.0	Citrix ADC/NetScaler Gateway SAML Authentication escalada de privilegios	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-8300
2021-06-16	5.7	5.5	Citrix ADC/Netscaler Gateway/SD-WAN WANOP Edition denegación de servicio	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-8299
2020-09-18	5.3	5.1	Citrix ADC/Gateway/NetScaler Gateway/SD-WAN WANOP Management Interface escalada de privilegios	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-8247