{"id":"CVE-2023-6548","aliases":["EUVD-2023-58778","GHSA-w4rw-v3mm-hj8h"],"status":"published","title":"[PROBLEMTYPE] in [COMPONENT] in [VENDOR] [PRODUCT] [VERSION] on [PLATFORMS] allows [ATTACKER] to ...","description":"Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.03191,"percentile":0.88188,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":false,"fix_available":false},"cwes":["CWE-94"],"published":"2024-01-17T20:11:18Z","modified":"2026-06-17T06:50:58Z","kev":{"date_added":"2024-01-17","due_date":"2024-01-24","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2024-01-17"},{"source":"kev","since":"2024-01-17"}],"products":[{"vendor":"citrix","product":"netscaler adc"},{"vendor":"citrix","product":"netscaler adc and netscaler gateway"},{"vendor":"citrix","product":"netscaler_application_delivery_controller"},{"vendor":"citrix","product":"netscaler_gateway"},{"vendor":"cloud software group","product":"netscaler adc"},{"vendor":"cloud software group","product":"netscaler gateway"}],"references":[{"url":"https://support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549","tags":["x_transferred","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-6548","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6548"},{"url":"https://github.com/advisories/GHSA-w4rw-v3mm-hj8h"}],"sources":{"cve":[{"id":"CVE-2023-6548","description":"Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.","status":"published","published":"2024-01-17T20:11:18.462Z","modified":"2025-10-21T23:05:28.157Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:35:25.095989Z"}],"euvd":[{"id":"EUVD-2023-58778","description":"Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.","status":"published","published":"2024-01-17T20:11:18Z","modified":"2025-10-21T23:05:28Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"exploited_since":"2024-01-17","updated_at":"2026-11-02T20:31:27.312976Z"}],"ghsa":[{"id":"GHSA-w4rw-v3mm-hj8h","title":"[PROBLEMTYPE] in [COMPONENT] in [VENDOR] [PRODUCT] [VERSION] on [PLATFORMS] allows [ATTACKER] to ...","description":"[PROBLEMTYPE] in [COMPONENT] in [VENDOR] [PRODUCT] [VERSION] on [PLATFORMS] allows [ATTACKER] to [IMPACT] via [VECTOR]","status":"published","published":"2024-01-17T21:30:21Z","modified":"2025-10-22T00:34:00Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:04:08.734574Z"}],"kev":[{"id":"CVE-2023-6548","title":"Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","description":"Citrix NetScaler ADC and NetScaler Gateway contain a code injection vulnerability that allows for authenticated remote code execution on the management interface with access to NSIP, CLIP, or SNIP.","cwes":["CWE-94"],"kev":{"date_added":"2024-01-17","due_date":"2024-01-24","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.234141Z"}],"nvd":[{"id":"CVE-2023-6548","description":"Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.","status":"published","published":"2024-01-17T20:15:50.627Z","modified":"2026-06-17T06:50:58.003Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:09:01.900189Z"}]}}