CyberzSOC

These vulnerabilities have been actively exploited and require urgent patching [1, 2]. [New] On July 17, The NHS England National Cyber Security Operations Centre announced that new intelligence provided by CrowdStrike indicates that contrary to Citrix’s initial disclosure, the vulnerability CVE-2023-6548 does not require user privileges for exploitation [3]. [Updated] The vulnerability CVE-2023-6548 , with a CVSS score of 8.8, is an Unauthenticated Remote Code Execution (RCE) vulnerability in the NetScaler ADC and Gateway appliances. It can be exploited by an unauthenticated attacker with access to the appliance’s management The vulnerability CVE-2023-6549 , with a CVSS score of 8.2, is a Denial of Service (DoS) vulnerability in the same appliances. It can be exploited when a vulnerable appliance has been configured as a Gateway (i.e., VPN, ICA Proxy, CVPN, RDP Proxy) or as an AAA virtual server. CERT-EU strongly recommends installing the releases patches for these vulnerabilities.