As per a piece released on the official website of the Australian Cyber Security Centre (ACSC), Citrix NetScaler ADC and NetScaler Gateway have a vulnerability that the ACSC is monitoring in case it is used on Australian networks.
The Citrix NetScaler ADC and NetScaler Gateway vulnerability has high exposure in Australia, according to the ACSC, and any potential exploitation would have a considerable impact on Australian systems and networks.
Citrix has discovered CVE-2023-3519 attacks on unprotected appliances.
Guidelines for Australian Organisations on Mitigations
Australian organisations should review their networks for the use of vulnerable instances of Citrix NetScaler ADC and NetScaler Gateway.
Customers of NetScaler ADC and NetScaler Gateway who are affected are recommended to immediately install the required updated versions as given below:
- NetScaler ADC and NetScaler Gateway 13.1-49.13 and later releases.
- NetScaler ADC and NetScaler Gateway 13.0-91.13 and later releases of 13.0.
- NetScaler ADC 13.1-FIPS 13.1-37.159 and later releases of 13.1-FIPS.
- NetScaler ADC 12.1-FIPS 12.1-55.297 and later releases of 12.1-FIPS.
- NetScaler ADC 12.1-NDcPP 12.1-55.297 and later releases of 12.1-NDcPP.
As a matter of great importance, the ACSC urges concerned Australian organisations to assess these mitigations and implement them when practical. Any upcoming patch releases from Citrix NetScaler ADC and NetScaler Gateway should be monitored by affected enterprises.
Furthermore, two further vulnerabilities, CVE-2023-3467 and CVE-2023-3466, are known to the ACSC.
The ACSC is keeping an eye on the issue and is prepared to help and offer guidance if needed.
How can Anitech help?
Anitech’s experienced Information Security consultants can help you understand the vulnerabilities.
They can also help you with installing updates, taking precautions, and assisting you in enhancing your organisation’s security posture.
For further guidance, call us at – 1300 802 163 or e-mail – sales@anitechgroup.com
Recent Comments