CVE-2023-3519 is a critical vulnerability with a severity rating of 9.8, affecting Citrix NetScaler Application Delivery Controller and Citrix NetScaler Gateway systems. This unauthenticated remote code execution vulnerability allows attackers to exploit certain versions of these products, potentially compromising the security of affected systems. It is essential for organizations using these systems to take appropriate measures to mitigate the risk and protect their resources.

How do I know if I'm affected?

To determine if you're affected by this vulnerability, you should check if you're using Citrix NetScaler Application Delivery Controller or Citrix NetScaler Gateway systems. Affected versions include Citrix NetScaler Application Delivery Controller versions 11.1-65.22, 12.1 up to 12.1-55.297, 13.0 up to 13.0-91.13, and 13.1 up to 13.1-49.13. For Citrix NetScaler Gateway, affected versions are 13.0 up to 13.0-91.13, and 13.1 up to 13.1-49.13. If your system is running one of these versions, you may be vulnerable to this critical unauthenticated remote code execution issue.

What should I do if I'm affected?

If you're affected by the vulnerability, it's crucial to act quickly. Update your Citrix NetScaler Application Delivery Controller or Citrix NetScaler Gateway to the latest version. Apply any available mitigations from the vendor. If your system is end-of-life or end-of-service, consider replacing it with a supported version. By taking these steps, you can help protect your resources from potential attacks.

Is CVE-2023-3519 in CISA’s Known Exploited Vulnerabilities Catalog?

Yes, it is in CISA's Known Exploited Vulnerabilities Catalog. The vulnerability, also known as Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability was added to the catalog on July 19, 2023, with a due date of August 9, 2023. The required action for this vulnerability is to apply mitigations as per vendor instructions or discontinue the use of the product if mitigations are unavailable.

Weakness enumeration

The Weakness Enumeration for CVE-2023-3519 is CWE-94, which refers to improper control of code generation, also known as code injection. This vulnerability allows unauthenticated attackers to execute code remotely on affected systems.

For more details

CVE-2023-3519 is a critical vulnerability that requires immediate attention. For a comprehensive understanding of its description, severity, technical details, and affected software configurations, refer to the NVD page and the resources listed below.

• Packet Storm

• Citrix

• CISA BOD 22-01

• CISA Known Exploited Vulnerabilities Catalog