Vulnerability identifier: #VU81926

Vulnerability risk: Critical

CVSSv3.1: 9 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L/E:H/RL:O/RC:C]

CVE-ID: CVE-2023-4966

CWE-ID: CWE-119

Exploitation vector: Network

Exploits in database: 5

• March 22, 2024
  • CVE-2023-4966 (An Exploitation script developed to exploit the CVE-2023-4966 bleed citrix information disclosure vulnerability) [Github]
• December 19, 2023
  • CVE-2023-4966 (Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server. ) [Github]
• November 2, 2023
  • citrix CVE-2023-4966 [Github]
• October 30, 2023
  • Citrix ADC (NetScaler) Bleed Scanner [Metasploit]
• October 25, 2023
  • exploits (Repository to store exploits created by Assetnotes Security Research team) [Custom exploits]

Vulnerable software:
Citrix Netscaler ADC
Client/Desktop applications / Software for system administration
Citrix NetScaler Gateway
Server applications / Application servers

Vendor: Citrix