{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-22T06:14:16.354","vulnerabilities":[{"cve":{"id":"CVE-2023-6548","sourceIdentifier":"secure@citrix.com","published":"2024-01-17T20:15:50.627","lastModified":"2026-06-17T06:50:58.003","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface."},{"lang":"es","value":"El control inadecuado de la generación de código (\"inyección de código\") en NetScaler ADC y NetScaler Gateway permite a un atacante con acceso a NSIP, CLIP o SNIP con interfaz de administración realizar una ejecución remota de código autenticado (con privilegios bajos) en Management Interface."}],"affected":[{"source":"secure@citrix.com","affectedData":[{"vendor":"Cloud Software Group","product":"NetScaler ADC","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"12.35","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"51.15","versionType":"patch","status":"affected"},{"version":"13.0","lessThan":"92.21","versionType":"patch","status":"affected"},{"version":"13.1-FIPS","lessThan":"37.176","versionType":"patch","status":"affected"},{"version":"12.1-FIPS","lessThan":"55.302","versionType":"patch","status":"affected"},{"version":"12.1-NDcPP","lessThan":"55.302","versionType":"patch","status":"affected"}]},{"vendor":"Cloud Software Group","product":"NetScaler Gateway","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"12.35","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"51.15","versionType":"patch","status":"affected"},{"version":"13.0","lessThan":"92.21","versionType":"patch","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"citrix","product":"netscaler_application_delivery_controller","defaultStatus":"unknown","cpes":["cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1:*:*:*:-:*:*:*"],"versions":[{"version":"14.1","lessThan":"14.1-12.35","versionType":"custom","status":"affected"}]},{"vendor":"citrix","product":"netscaler_application_delivery_controller","defaultStatus":"unknown","cpes":["cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1:*:*:*:-:*:*:*"],"versions":[{"version":"13.1","lessThan":"13.1-51.15","versionType":"custom","status":"affected"}]},{"vendor":"citrix","product":"netscaler_application_delivery_controller","defaultStatus":"unknown","cpes":["cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.0:*:*:*:-:*:*:*"],"versions":[{"version":"13.0","lessThan":"13.0-92.21","versionType":"custom","status":"affected"}]},{"vendor":"citrix","product":"netscaler_application_delivery_controller","defaultStatus":"unknown","cpes":["cpe:2.3:a:citrix:netscaler_application_delivery_controller:13.1:*:*:*:fips:*:*:*"],"versions":[{"version":"13.1","lessThan":"13.1-37.176","versionType":"custom","status":"affected"}]},{"vendor":"citrix","product":"netscaler_application_delivery_controller","defaultStatus":"unknown","cpes":["cpe:2.3:a:citrix:netscaler_application_delivery_controller:12.1:*:*:*:fips:*:*:*"],"versions":[{"version":"12.1","lessThan":"12.1-55.302","versionType":"custom","status":"affected"}]},{"vendor":"citrix","product":"netscaler_application_delivery_controller","defaultStatus":"unknown","cpes":["cpe:2.3:a:citrix:netscaler_application_delivery_controller:12.1:*:*:*:ndcpp:*:*:*"],"versions":[{"version":"12.1","lessThan":"12.1-55.302","versionType":"custom","status":"affected"}]},{"vendor":"citrix","product":"netscaler_gateway","defaultStatus":"unknown","cpes":["cpe:2.3:a:citrix:netscaler_gateway:14.1:*:*:*:*:*:*:*"],"versions":[{"version":"14.1","lessThan":"14.1-12.35","versionType":"custom","status":"affected"}]},{"vendor":"citrix","product":"netscaler_gateway","defaultStatus":"unknown","cpes":["cpe:2.3:a:citrix:netscaler_gateway:13.1:*:*:*:*:*:*:*"],"versions":[{"version":"13.1","lessThan":"13.1-51.15","versionType":"custom","status":"affected"}]},{"vendor":"citrix","product":"netscaler_gateway","defaultStatus":"unknown","cpes":["cpe:2.3:a:citrix:netscaler_gateway:13.0:*:*:*:*:*:*:*"],"versions":[{"version":"13.0","lessThan":"13.0-92.21","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"secure@citrix.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.1,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-01-18T14:00:57.375485Z","id":"CVE-2023-6548","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2024-01-17","cisaActionDue":"2024-01-24","cisaRequiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","weaknesses":[{"source":"secure@citrix.com","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-55.302","matchCriteriaId":"E5672003-8E6B-4316-B5C9-FE436080ADD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-55.302","matchCriteriaId":"D1A11ABD-4F45-4BA9-B30B-F1D8A612CC15"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.0","versionEndExcluding":"13.0-92.21","matchCriteriaId":"FC0A5AAC-62DD-416A-A801-A7A95D5EF73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-37.176","matchCriteriaId":"8C8A6B95-8338-4EE7-A6EC-7D84AEDC4AF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-51.15","matchCriteriaId":"3CF77D9D-FC89-493D-B97D-F9699D182F54"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-12.35","matchCriteriaId":"62CD82CF-9013-4E54-B175-19B804A351AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0","versionEndExcluding":"13.0-92.21","matchCriteriaId":"68E1F810-ABCD-40A7-A8C1-4E8727799C7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-51.15","matchCriteriaId":"E870C309-D5CD-4181-9DEB-4833DE2EAEB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-12.35","matchCriteriaId":"2836707F-A36F-479E-BFDC-CF55AEFC37EE"}]}]}],"references":[{"url":"https://support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549","source":"secure@citrix.com","tags":["Vendor Advisory"]},{"url":"https://support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-6548","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}}]}