← CVE Intelligence

CVE-2023-6548

Cloud Software Group / NetScaler ADC PUBLISHED

Description (CNA)

Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.

Affected (CNA)

Vendor / productVersions
Cloud Software Group / NetScaler ADCaffected 14.1 before 12.35; affected 13.1 before 51.15; affected 13.0 before 92.21; affected 13.1-FIPS before 37.176; affected 12.1-FIPS before 55.302; affected 12.1-NDcPP before 55.302
Cloud Software Group / NetScaler Gatewayaffected 14.1 before 12.35; affected 13.1 before 51.15; affected 13.0 before 92.21

CWE

CWE-94

References

ADP enrichment

CISA-ADP

No English description supplied.

CVE

No English description supplied.