Do Son Discover the most exploited vulnerabilities of 2023 in a joint advisory by top cybersecurity agencies. Learn about the critical CVEs targeted by malicious actors.
CVE-2023-4966
Cybersecurity researchers are tracking a significant escalation in activity from the GOLD IONIC ransomware group
LockBit 3.0, an advanced ransomware, has been exploiting a critical vulnerability dubbed "Citrix Bleed" (CVE-2023-4966)
Mandiant have discerned an active exploitation of a vulnerability within Citrix's NetScaler ADC and Gateway systems
With a PoC exploit for CVE-2023-4966 now available on Github and this vulnerability being actively exploited
CVE-2021-1435 provides attackers a door into the system, permitting them to inject arbitrary commands, all executable as the all-powerful root user
Citrix has since revised its recommendations, noting that CVE-2023-4966 exploits were found on unprotected devices.
The vulnerability, designated as CVE-2023-4966, has been assigned a CVSS score of 9.4, indicating its high severity.