Unrated severityCISA KEVNVD Advisory· Published Jan 17, 2024· Updated Oct 21, 2025

CVE-2023-6549

Description

Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read

Affected products

Citrix Systems/Netscalerllm-fuzzy
Citrix Systems/Access Gatewayllm-fuzzy
Cloud Software Group/NetScaler ADCv5
Range: 14.1

Patches

Vulnerability mechanics

References

support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.046
exploit	0.000
kev	0.120
patch	0.000
ransomware	0.000