---
title: "SECURITY ALERT: Citrix NetScaler ADC and Gateway Zero-Day Vulnerabilities"
description: Zero-day security vulnerabilities in Citrix NetScaler ADC and Gateway. Learn the risks and recommended actions to protect your systems.
---

[IT and Cybersecurity News](https://blog.systemsengineering.com/blog)

# [SECURITY ALERT: Citrix NetScaler ADC and Gateway Zero-Day Vulnerabilities](https://blog.systemsengineering.com/blog/security-alert-for-cve20233519-cve20233466-cve20233467-0)

 Written by [Systems Engineering](https://blog.systemsengineering.com/blog/author/systems-engineering) | January 19, 2024

Systems Engineering is aware of the vulnerabilities recently found in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway). Exploits on unmitigated appliances have been observed. 

Citrix rates these vulnerabilities as HIGH

## Description

Citrix has released a security [bulletin](https://support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549) addressing two (2) vulnerabilities: CVE-2023-6548, and CVE-2023-6549. These vulnerabilities could potentially allow an attacker to gain unauthorized access to sensitive information or execute arbitrary code on affected systems.

- **CVE-2023-6548** is a remote code execution (RCE) vulnerability in the NetScaler ADC and Gateway appliances. An authenticated attacker with low-level privileges could exploit this vulnerability if they can access NetScaler IP (NSIP), Subnet IP (SNIP), or cluster management IP (CLIP) with access to the appliance’s management interface. 
- **CVE-2023-6549** is a denial of service (DoS) vulnerability in the NetScaler ADC and Gateway appliances. An attacker could exploit this vulnerability when a vulnerable appliance has been configured as a Gateway (e.g. VPN, ICA Proxy, CVPN, RDP Proxy) or as a AAA virtual server.

## Scope

The following supported versions of NetScaler are impacted: 

- **NetScaler ADC and NetScaler Gateway 14.1 before 14.1-12.35**
- **NetScaler ADC and NetScaler Gateway 13.1 before 13.1-51.15**
- **NetScaler ADC and NetScaler Gateway 13.0 before 13.0-92.21**
- **NetScaler ADC 13.1-FIPS before 13.1-37.176**
- **NetScaler ADC 12.1-FIPS before 12.1-55.302**
- **NetScaler ADC 12.1-NDcPP before 12.1-55.302**

Note: NetScaler ADC and NetScaler Gateway version 12.1 is now End Of Life (EOL) and is vulnerable.

## Course of Action

Systems Engineering is proactively patching clients subscribed to [SE Platform](https://www.systemsengineering.com/managed-it/it-essentials/) and NetAdmin services, that have NetScaler's in their compute environment. 

For all other clients, we strongly recommend you update impacted systems with the latest security patches as soon as possible. Citrix has provided instructions in their security advisory [here](https://support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549).

If you are a Systems Engineering client and have questions about this Security Alert, please contact your Account Manager.

[View full post](https://blog.systemsengineering.com/blog/security-alert-for-cve20233519-cve20233466-cve20233467-0)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Systems Engineering"
  },
  "dateModified" : "2025-06-18T13:18:00.646Z",
  "datePublished" : "2024-01-19T13:20:59Z",
  "headline" : "SECURITY ALERT: Citrix NetScaler ADC and Gateway Zero-Day Vulnerabilities",
  "image" : {
    "@type" : "ImageObject",
    "height" : 143,
    "url" : "https://508286.fs1.hubspotusercontent-na1.net/hubfs/508286/286x143-Security%20Alert_Systems%20Engineering.png",
    "width" : 286
  },
  "mainEntityOfPage" : "https://blog.systemsengineering.com/blog/security-alert-for-cve20233519-cve20233466-cve20233467-0",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60.0,
      "url" : "https://cdn2.hubspot.net/hubfs/508286/Systems%20Engineering%20Logo_2019_Color_100x100px-4.png",
      "width" : 66.92957
    },
    "name" : "<span>Systems Engineering</span> Blog"
  }
}
```