CVE-2023-4966— Citrix Systems NetScaler ADC和NetScaler Gateway 安全漏洞
一分钟漏洞结论
影响对象
Citrix NetScaler ADC
利用判断
已确认在野利用，应立即处置
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Citrix Systems Citrix NetScaler Gateway（Citrix Systems Gateway）和Citrix Systems NetScaler ADC都是美国思杰系统（Citrix Systems）公司的产品。Citrix NetScaler Gateway是一套安全的远程接入解决方案。该方案可为管理员提供应用级和数据级管控功能，以实现用户从任何地点远程访问应用和数据。Citrix Systems NetScaler ADC是一个应用程序交付和安全平台。 NetScale
公开利用映射 2
Metasploit · 1
citrix_bleed_cve_2023_4966.rb [auxiliary]
Nuclei · 1
CVE-2023-4966.yaml [template]
已观察到在野利用
cisa_kev · confirmed
可能的 ATT&CK 技术 1 AI
T1530 · Data from Cloud Storage影响版本矩阵 9
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| Citrix | NetScaler ADC | 14.1< 8.50 |
affected |
13.1< 49.15 |
affected | ||
13.0< 92.19 |
affected | ||
13.1-FIPS< 37.164 |
affected | ||
12.1-FIPS< 55.300 |
affected | ||
12.1-NDcPP< 55.300 |
affected | ||
| Citrix | NetScaler Gateway | 14.1< 8.50 |
affected |
13.1< 49.15 |
affected | ||
13.0< 92.19 |
affected |
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2023-4966 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Unauthenticated sensitive information disclosure
来源: CVE Program / CVE List V5
Vulnerability Description
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
来源: CVE Program / CVE List V5
Vulnerability Type
内存缓冲区边界内操作的限制不恰当
来源: CVE Program / CVE List V5
Vulnerability Title
Citrix Systems NetScaler ADC和NetScaler Gateway 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Citrix Systems Citrix NetScaler Gateway（Citrix Systems Gateway）和Citrix Systems NetScaler ADC都是美国思杰系统（Citrix Systems）公司的产品。Citrix NetScaler Gateway是一套安全的远程接入解决方案。该方案可为管理员提供应用级和数据级管控功能，以实现用户从任何地点远程访问应用和数据。Citrix Systems NetScaler ADC是一个应用程序交付和安全平台。 NetScale
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| Citrix | NetScaler ADC | 14.1 ~ 8.50 | - |
|
| Citrix | NetScaler Gateway | 14.1 ~ 8.50 | - |
|
二、漏洞 CVE-2023-4966 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|---|---|---|
| 1 | Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server. | https://github.com/Chocapikk/CVE-2023-4966 | POC详情 |
| 2 | Citrix CVE-2023-4966 from assetnote modified for parallel and file handling | https://github.com/dinosn/citrix_cve-2023-4966 | POC详情 |
| 3 | Proof Of Concept for te NetScaler Vuln | https://github.com/mlynchcogent/CVE-2023-4966-POC | POC详情 |
| 4 | None | https://github.com/IceBreakerCode/CVE-2023-4966 | POC详情 |
| 5 | Ansible Playbook for CVE-2023-4966 | https://github.com/ditekshen/ansible-cve-2023-4966 | POC详情 |
| 6 | CVE-2023-4966 - NetScaler ADC and NetScaler Gateway Memory Leak Exploit | https://github.com/0xKayala/CVE-2023-4966 | POC详情 |
| 7 | Parse citrix netscaler logs to check for signs of CVE-2023-4966 exploitation | https://github.com/certat/citrix-logchecker | POC详情 |
| 8 | An Exploitation script developed to exploit the CVE-2023-4966 bleed citrix information disclosure vulnerability | https://github.com/sanjai-AK47/CVE-2023-4966 | POC详情 |
| 9 | None | https://github.com/fdevsectest/CVE-2023-4966 | POC详情 |
| 10 | Scripts to get infos | https://github.com/s-bt/CVE-2023-4966 | POC详情 |
| 11 | Programm to exploit a range of ip adresses | https://github.com/byte4RR4Y/CVE-2023-4966 | POC详情 |
| 12 | Python script to search Citrix NetScaler logs for possible CVE-2023-4966 exploitation. | https://github.com/jmussmann/cve-2023-4966-iocs | POC详情 |
| 13 | Simulates CVE-2023-4966 Citrix Bleed overread bug | https://github.com/morganwdavis/overread | POC详情 |
| 14 | Proof Of Concept for te NetScaler Vuln | https://github.com/senpaisamp/Netscaler-CVE-2023-4966-POC | POC详情 |
| 15 | An Exploitation script developed to exploit the CVE-2023-4966 bleed citrix information disclosure vulnerability | https://github.com/RevoltSecurities/CVE-2023-4966 | POC详情 |
| 16 | None | https://github.com/LucasOneZ/CVE-2023-4966 | POC详情 |
| 17 | CVE-2023-4966-exploit | https://github.com/akshthejo/CVE-2023-4966-exploit | POC详情 |
| 18 | The vulnerability would enable an attacker to remotely obtain sensitive information from a NetScaler appliance configured as a Gateway or AAA virtual server via a very commonly connected Web interface, and without requiring authentication. This bug is nearly identical to the Citrix Bleed vulnerability (CVE-2023-4966), except it is less likely to return highly sensitive information to an attacker. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/citrix/citrix-oob-memory-read.yaml | POC详情 |
| 19 | Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA ?virtual?server. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4966.yaml | POC详情 |
| 20 | None | https://github.com/Threekiii/Awesome-POC/blob/master/%E7%BD%91%E7%BB%9C%E8%AE%BE%E5%A4%87%E6%BC%8F%E6%B4%9E/Citrix%20NetScaler%20ADC%20&%20Gateway%20%E4%BF%A1%E6%81%AF%E6%B3%84%E9%9C%B2%E6%BC%8F%E6%B4%9E%20CVE-2023-4966.md | POC详情 |
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2023-4966 的情报信息
请登录查看更多情报信息。
CVE-2023-4966 公开利用代码 (1)
CVE-2023-4966 其他参考 (1)
IV. Related Vulnerabilities
Same product: NetScaler ADC
-
CVE-2024-8535
Citrix Systems NetScaler Gateway和NetScaler ADC 安全漏洞 -
CVE-2024-8534
Citrix Systems NetScaler Gateway和NetScaler ADC 安全漏洞 -
CVE-2024-5492
Citrix Systems NetScaler ADC和Citrix Systems NetScaler Gatewa -
CVE-2024-5491
Citrix Systems NetScaler Gateway和Citrix Systems NetScaler AD -
CVE-2023-6549
Citrix Systems ADC and NetScaler Gateway 缓冲区错误漏洞
V. Comments for CVE-2023-4966
暂无评论