Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLI
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Listed in CISA KEV
- Fix
- Fixed in 12.35, 51.15, 92.21, 37.176, 55.302
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
NetScaler ADC and NetScaler Gateway appliances are affected. An attacker who can reach the management interface through the NSIP, CLIP, or SNIP, and who has low-privileged authenticated access, could run arbitrary code on that management interface.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.
Timeline
- Added to CISA KEV
CISA has evidence of exploitation in the wild
- CVE published
- CISA remediation deadline
Due date for US federal agencies to patch
- Record last updated
Affected versions
- Cloud Software Group NetScaler ADC
From 14.1 · fixed in 12.35; From 13.1 · fixed in 51.15; From 13.0 · fixed in 92.21; From 13.1-FIPS · fixed in 37.176; From 12.1-FIPS · fixed in 55.302; From 12.1-NDcPP · fixed in 55.302
- Cloud Software Group NetScaler Gateway
From 14.1 · fixed in 12.35; From 13.1 · fixed in 51.15; From 13.0 · fixed in 92.21