InfoSecBulletin Cybersecurity for mankind
Citrix has warned users about severe vulnerabilities in their widely-used NetScaler products. These vulnerabilities, known as CVE-2024-6235 and CVE-2024-6236, could potentially allow unauthorized access to sensitive information and cause denial-of-service (DoS) attacks.
CVE-2024-6235: Sensitive Information Disclosure (Critical Severity)
16,000+ Fortinet devices compromised with symlink backdoor, Mostly in Asia
Patch now! Critical Erlang/OTP SSH Vuln Allows UCE
CISA warns of increasing risk tied to Oracle legacy Cloud leak
CVE-2025-20236
Cisco Patches Unauthenticated RCE Flaw in Webex App
Apple released emergency security updates for 2 zero-day vulns
Oracle Released Patched for 378 flaws for April 2025
CVE-2025-24054
Hackers Exploiting NTLM Spoofing Windows Vuln the in Wild
Bengaluru firm got ransomware attack, Hacker demanded $70,000
MITRE warns: U.S. Govt. Funding for MITRE’s CVE Ends Today
PwC exits more than a dozen countries in push to avoid scandals: FT reports
The flaw in the NetScaler Console (previously known as NetScaler ADM) is rated with a CVSSv4 score of 9.4. It could let attackers access confidential data without authorization, possibly exposing trade secrets, customer information, or other important assets.
CVE-2024-6236: Denial of Service (High Severity)
This vulnerability, rated with a score of 7.1, affects NetScaler Console, NetScaler SVM, and NetScaler Agent. Attackers exploiting this flaw could disrupt the normal operation of NetScaler services, causing downtime and financial losses for affected organizations.
Affected Versions and Urgent Call to Action:
NetScaler Console, SVM, and Agent have security vulnerabilities. Cloud Software Group advises users to update their NetScaler software to the latest patched versions as soon as possible.
The specific patched versions for each product are:
NetScaler Console: 14.1-25.53 or later for 14.1, 13.1-53.22 or later for 13.1, and 13.0-92.31 or later for 13.0
NetScaler SVM: 14.1-25.53 or later for 14.1, 13.1-53.17 or later for 13.1, and 13.0-92.31 or later for 13.0
NetScaler Agent: 14.1-25.53 or later for 14.1, 13.1-53.22 or later for 13.1, and 13.0-92.31 or later for 13.0
Citrix has warned users about two security vulnerabilities (CVE-2024-6286 and CVE-2024-6151) in the Citrix Workspace app for Windows and the Virtual Delivery Agent for Windows. Both vulnerabilities have a high severity CVSSv4 score of 8.5.
