CVE-2023-4966: Technical Deep-Dive (Auto Refreshed)

Generated on 2026-03-26T01:01:17.220Z. This file is automatically regenerated every 30 minutes by the CVE AI enrichment job using web sources (NVD, MITRE, CISA KEV, GitHub).

Executive Technical Summary

Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.

• Context preserved from previous revision: Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server. Notes: Full-scope external security scanner for Citrix NetScaler ADC/Gateway - 25 CVEs, 10 fingerprint vectors, IoC detection

Technical Details

• CVE: CVE-2023-4966
• KEV date added: Unknown
• KEV due date: Not specified
• NVD published: 2023-10-10
• NVD modified: 2025-10-24
• MITRE modified: 2025-10-21
• CVSS base score: 9.4
• CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
• CVSS exploitability score: 3.9
• CVSS impact score: 5.5
• Attack vector: Network
• Attack complexity: Low
• Privileges required: None
• User interaction: None
• Scope: Unchanged
• Confidentiality impact: High
• Integrity impact: High
• Availability impact: Low

Versions and Products Impacted

• citrix / netscaler application delivery controller (versions: >= 12.1, < 12.1-55.300)
• citrix / netscaler application delivery controller (versions: >= 13.0, < 13.0-92.19)
• citrix / netscaler application delivery controller (versions: >= 13.1, < 13.1-37.164)
• citrix / netscaler application delivery controller (versions: >= 13.1, < 13.1-49.15)
• citrix / netscaler application delivery controller (versions: >= 14.1, < 14.1-8.50)
• citrix / netscaler gateway (versions: >= 13.0, < 13.0-92.19)
• citrix / netscaler gateway (versions: >= 13.1, < 13.1-49.15)
• citrix / netscaler gateway (versions: >= 14.1, < 14.1-8.50)
• Citrix / NetScaler ADC (versions: 14.1, 13.1, 13.0, 13.1-FIPS, 12.1-FIPS, 12.1-NDcPP)
• Citrix / NetScaler Gateway (versions: 14.1, 13.1, 13.0)

Weakness Classification

• CWE-119
• NVD-CWE-noinfo

Repositories for Lab Validation (Public Examples)

• zulloper/cve-poc | stars: 8 | updated: 2026-03-26 | https://github.com/zulloper/cve-poc
  Notes: CVE POC repo 자동 수집기
• cybrdude/citrixscan | stars: 2 | updated: 2026-03-25 | https://github.com/cybrdude/citrixscan
  Notes: Full-scope external security scanner for Citrix NetScaler ADC/Gateway - 25 CVEs, 10 fingerprint vectors, IoC detection

People and Organizations Mentioned

• Citrix
• zulloper
• cybrdude

Practical Defensive Validation (Authorized Only)

1. Use only isolated environments and systems you own or are explicitly authorized to test.
2. Snapshot infrastructure before validation and preserve baseline logs (EDR, SIEM, OS, app).
3. Classify sensitive fields in citrix / netscaler application delivery controller (versions: >= 12.1, < 12.1-55.300) and verify logs/responses do not leak secrets.
4. Test redaction and response-minimization controls in debug and production-like modes.
5. Monitor bulk export behavior and abnormal low-privilege read spikes.

References

• NVD record: https://nvd.nist.gov/vuln/detail/CVE-2023-4966
• MITRE CVE record: https://www.cve.org/CVERecord?id=CVE-2023-4966
• CISA KEV Catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• CISA KEV JSON feed: https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json
• http://packetstormsecurity.com/files/175323/Citrix-Bleed-Session-Token-Leakage-Proof-Of-Concept.html
• https://support.citrix.com/article/CTX579459
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4966
• Repository example: https://github.com/zulloper/cve-poc
• Repository example: https://github.com/cybrdude/citrixscan

This content is for defensive security training and authorized validation only.