PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2023-6549] OOB Memory Read: Netscaler ADC and Gateway

bishopfox.com | blog | CVE-2023-6549 | #citrix | #netscaler | #patch-management | #vulnerability-disclosure | #cve-2023-6549 | #out-of-bounds-read
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bishop Fox details an unauthenticated out-of-bounds memory read in Citrix NetScaler ADC and Gateway (CVE-2023-6549) that can leak prior POST request bodies; patched releases listed per CTX584986.
CVE
CVE-2023-6549
Published
Collected

Related coverage

blog · bishopfox.com
Delivering Peace of Mind About New Citrix Emerging Threat
Barrett Darnell recounts how Bishop Fox's CAST team triaged Citrix's 11-CVE wave, de-escalating the CVE-2020-8193 authentication bypass after confirming clients were not exposed.
blog · wiz.io
Critical vulnerabilities in NetScaler ADC exploited in-the-wild: everything you need to know
Wiz covers three critical NetScaler ADC and Gateway flaws exploited in the wild — CVE-2025-5777 (CitrixBleed-style memory overread), CVE-2025-5349 and CVE-2025-6543 — and urges immediate patching.
vulnerability · bishopfox.com
Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490
Bishop Fox maps NetScaler CVE-2026-19490, a CVSS 9.3 SAML bypass: one request runs post-login code, impact ranges from crash to internal proxy to root, plus a safe patch-state checker.
vulnerability · bishopfox.com
No Crash Required: Verifying the Citrix NetScaler SAML Patch for CVE-2026-8452
Bishop Fox shows how to verify the Citrix NetScaler patch for CVE-2026-8452 from the outside: benign SAML requests reveal patch state without crashes, plus IOCs—and one crash signal that misleads.
vulnerability · bishopfox.com
Analysis and Exploitation of CVE-2023-3519
Bishop Fox analyzes and exploits CVE-2023-3519, the critical Citrix ADC RCE seen in the wild, pinpointing a simpler vulnerable function (ns_aaa_gwtest_get_event_and_target_names) via patch diffing.
vulnerability · bishopfox.com
Citrix ADC Gateway RCE: CVE-2023-3519 is Exploitable, and 53% of Servers Are Unpatched
Bishop Fox developed an exploit for CVE-2023-3519, an unauthenticated stack overflow in Citrix ADC Gateway granting RCE; roughly 53% of the 61,000 exposed appliances were unpatched.
Back