CVE-2023-6549

high-risk
Published 2024-01-17

Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read

Do I need to act?

!
76.5% chance of exploitation in next 30 days
EPSS score — higher than 23% of all CVEs
!
CISA KEV: actively exploited in the wild
On the Known Exploited Vulnerabilities catalog — federal agencies must patch
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.2/10 High
NETWORK / LOW complexity

Affected Vendors

65
/ 100
high-risk
Severity 28/34 · Critical
Exploitability 27/34 · High
Exposure 10/34 · Low