KEVIntel
Back to KEVs
8.2
CVSS
High

CVE-2023-6549

PUBLISHED

Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of...

Exploited in the wild Remote Low complexity No user interaction
Vendor
Cloud Software Group
Product
NetScaler ADC
Published
Jan 17, 2024
EPSS
—

Description

Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read

cisa nuclei_scanner nessus_scanner

CVSS scores

CVSS v3.1 8.2 High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Exploitation status

Exploited in the wild

Recorded 2024-01-17 00:00:00 UTC · Source

SSVC decision points

Exploitation
active
Automatable
Yes
Technical impact
partial

References

Known exploited vulnerability sources

Catalogues that list this CVE as a known exploited vulnerability.

Source Added
CISA Jan 17, 2024

Scanner integrations

Scanner Reference Detected
Nuclei https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6549.yaml Jun 01, 2026
Nessus https://www.tenable.com/plugins/nessus/189070 Jun 02, 2025

Timeline

  • CVE ID Reserved

  • Added to KEVIntel

  • CVE Published to Public

  • Detected by Nessus

  • Detected by Nuclei