Security Advisory: Remote Code Execution Vulnerability (CVE-2023-3519)

Introduction

On 18 July 2023, Citrix published a security advisory that addressed a critical vulnerability with CVSS score 9.8 for CVE-2023-3519 for RCE (Remote Code Execution) in NetScaler ADC (formerly known as Citrix ADC) and NetScaler Gateway (formerly known as Citrix Gateway).

This vulnerability created a lot of buzz in the last several days. Many reports claim that the vulnerability was being exploited as a zero-day attack in the wild as threat actors were dropping a web shell onto organization’s …

adc advisory citrix citrix adc citrix gateway code code execution critical critical vulnerability cve cve-2023-3519 cvss gateway introduction july july 2023 netscaler netscaler adc netscaler gateway rce remote code remote code execution score security security advisory vulnerability