COOEY // HUBcompliance · community · intelligence

FAIL › dossier

NetScaler ADC and NetScaler Gateway product

4

failure events

1

zero-days

2

RCEs

4

on KEV

2

critical

95

worst shame

Dossier not yet built — the RAG curator builds one for players with ≥2 failure events (factory/dossier.py). The failure history and sentiment below are live.

Failure history 4 events

Date	Event	Sev	Flags	Shame	Summary
2023-07-19	CVE-2023-3519	critical	⚡RCE ⌖KEV	95	Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerability that allows for unauthenticated remote code execution.
2023-10-18	CVE-2023-4966	critical	◐0day ⌖KEV	80	Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
2024-01-17	CVE-2023-6548	high	⚡RCE ⌖KEV	65	Citrix NetScaler ADC and NetScaler Gateway contain a code injection vulnerability that allows for authenticated remote code execution on the management interface with access to NSIP, CLIP, or SNIP.
2024-01-17	CVE-2023-6549	high	⌖KEV	50	Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for a denial-of-service when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.