Vulnerability identifier: #VU78373

Vulnerability risk: Critical

CVSSv3.1: 9.4 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C]

CVE-ID: CVE-2023-3519

CWE-ID: CWE-94

Exploitation vector: Network

Exploits in database: 4

• October 25, 2023
  • citrix CVE-2023-3519 [Custom exploits]
• August 22, 2023
  • CVE-2023-3519 (POC Citrix vulnerability scanner. Auto Exploit) [Github]
• August 6, 2023
  • CVE-2023-3519 (RCE exploit for CVE-2023-3519) [Github]
• August 3, 2023
  • Citrix ADC (NetScaler) Forms SSO Target RCE [Metasploit]

Impact: Code execution

Vulnerable software:
Citrix Netscaler ADC
Client/Desktop applications / Software for system administration
Citrix NetScaler Gateway
Server applications / Application servers

Vendor: