CVE-2023-4966

Name of the Vulnerable Software and Affected Versions NetScaler ADC (affected versions not specified) NetScaler Gateway (affected versions not specified)

Description A buffer overflow issue exists in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server. This flaw allows a remote attacker to cause a disclosure of sensitive information, potentially impacting the confidentiality, integrity, and availability of protected data. A real-world incident involved Comcast Cable Communications (Xfinity), where attackers accessed servers to steal customer usernames, hashed passwords, contact details, social security numbers, and security questions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.