Zero-Day Vulnerabilities in Citrix Netscaler ADC and Gateway & Google Chrome: CVE-2023-6548, CVE-2023-6549, and CVE-2024-0519

Citrix has recently issued a warning to its customers, advising them to patch Netscaler ADC and Gateway appliances promptly to prevent the exploitation of two zero-day vulnerabilities, CVE-2023-6548 and CVE-2023-6549.

These zero-day vulnerabilities have the potential to lead to Remote Code Execution (RCE) and Denial-of-Service (DoS) attacks. The advisory mentions that these vulnerabilities only impact customer-managed NetScaler appliances, with no action required for customers of Citrix-managed cloud services or Citrix-managed Adaptive Authentication.

Here are the details of the vulnerabilities: 

• 
  CVE-2023-6548 …

adc chrome citrix citrix netscaler citrix netscaler adc code code execution customers cve cve-2024-0519 exploitation gateway google google chrome netscaler netscaler adc patch rce remote code remote code execution service vulnerabilities warning zero-day zero-day vulnerabilities