Citrix Releases Security Updates for Multiple Products 10 Oct 2023

ronjor · Oct 10, 2023

10/10/2023

Citrix has released security updates to address vulnerabilities affecting multiple products. A malicious cyber actor can exploit one of these vulnerabilities take control of an affected system.
CISA encourages users and administrators to review the following Citrix security bulletins and apply the necessary updates:
Click to expand...

NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2023-4966 and CVE-2023-4967
Citrix Hypervisor Multiple Security Updates

stapp · Nov 1, 2023

'Mass exploitation' of Citrix Bleed underway as ransomware crews pile in'

Citrix Bleed, the critical information-disclosure bug that affects NetScaler ADC and NetScaler Gateway, is now under "mass exploitation," as thousands of Citrix NetScaler instances remain vulnerable, according to security teams.
As of October 30, Shadowserver spotted just over 5,000 vulnerable servers on the public internet. And in the past week, GreyNoise observed 137 individual IP addresses attempting to exploit this Citrix vulnerability.
Citrix disclosed and issued a patch for the flaw – CVE-2023-4966 – on October 10.

However, "even if you applied the patch and rebooted, you still have a problem as session tokens persist," noted infosec watcher Kevin Beaumont, who said he had tracked just over 20,000 exploited servers as of Saturday.
Click to expand...

https://www.theregister.com/2023/10/31/mass_exploitation_citrix_bleed/

Log in or Sign up

Citrix Releases Security Updates for Multiple Products 10 Oct 2023

ronjor Global Moderator

stapp Global Moderator

Log in or Sign up

Citrix Releases Security Updates for Multiple Products 10 Oct 2023

ronjor Global Moderator

stapp Global Moderator

Useful Searches