Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Analysis and Exploitation of CVE-2023-3519

bishopfox.com | vulnerability | CVE-2023-3519 | #rce | #citrix | #netscaler | #exploit-analysis | #patch-diffing | #cve-2023-3519

Summary

Bishop Fox analyzes and exploits CVE-2023-3519, the critical Citrix ADC RCE seen in the wild, pinpointing a simpler vulnerable function (ns_aaa_gwtest_get_event_and_target_names) via patch diffing.
Published
Collected

original ↗

Related coverage

  1. Citrix ADC Gateway RCE: CVE-2023-3519 is Exploitable, and 53% of Servers Are Unpatched (bishopfox.com)
  2. Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490 (bishopfox.com)
  3. No Crash Required: Verifying the Citrix NetScaler SAML Patch for CVE-2026-8452 (bishopfox.com)
  4. CVE-2026-8452 PoC: Citrix NetScaler pre-auth RCE detection and exploitation (github.com)
  5. OOB Memory Read: Netscaler ADC and Gateway (bishopfox.com)
  6. Delivering Peace of Mind About New Citrix Emerging Threat (bishopfox.com)

back