NetScaler ADC and Gateway
CVE-2023-6548: NetScaler ADC and NetScaler Gateway Code Injection
Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| NetScaler ADC 14.1 | 12.35 or later |
| NetScaler ADC 13.1 | 51.15 or later |
| NetScaler ADC 13.0 | 92.21 or later |
| NetScaler ADC 13.1-FIPS | 37.176 or later |
| NetScaler ADC 12.1-FIPS | 55.302 or later |
| NetScaler ADC 12.1-NDcPP | 55.302 or later |
| NetScaler Gateway 14.1 | 12.35 or later |
| NetScaler Gateway 13.1 | 51.15 or later |
| NetScaler Gateway 13.0 | 92.21 or later |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.
Exploitation
CISA lists this CVE as exploited in the wild since 17 Jan 2024.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 11 Oct 2026.