CVE-2023-6549

Name of the Vulnerable Software and Affected Versions NetScaler ADC (affected versions not specified) NetScaler Gateway (affected versions not specified)

Description Improper restriction of operations within the bounds of a memory buffer allows an unauthenticated remote attacker to cause a denial of service and perform an out-of-bounds memory read. This issue is exploited by sending single crafted requests targeting SAML authentication, which can crash the system. Real-world incidents indicate that attackers have targeted edge infrastructure to potentially enable lateral movement into backend systems.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.