Detections
Analytics
CVE-2023-3519
critical
Description
Unauthenticated remote code execution
From the Tenable Blog
CVE-2023-3519: Critical RCE in Netscaler ADC (Citrix ADC) and Netscaler Gateway (Citrix Gateway)
Published: 2023-07-18
Citrix has released a patch fixing a remote code execution vulnerability in several versions of Netscaler ADC and Netscaler Gateway that has been exploited. Organizations are urged to patch immediately.
References
https://thehackernews.com/2026/06/inc-ransomware-claims-830-victims-since.html
https://securityaffairs.com/181453/apt/china-linked-silk-typhoon-apt-targets-north-america.html
https://www.securityweek.com/chinese-silk-typhoon-hackers-exploited-commvault-zero-day/
https://www.darkreading.com/cloud-security/silk-typhoon-north-american-orgs-cloud
https://thehackernews.com/2025/08/chinese-hackers-murky-genesis-and.html
https://www.crowdstrike.com/en-us/blog/murky-panda-trusted-relationship-threat-in-cloud/
https://cyberscoop.com/crowdstrike-silk-typhoon-murky-panda-china-espionage/
https://horizon3.ai/attack-research/attack-blogs/cve-2025-5777-citrixbleed-2-write-up-maybe/
https://www.theregister.com/2025/03/05/china_silk_typhoon_update/
https://www.microsoft.com/en-us/security/blog/2025/03/05/silk-typhoon-targeting-it-supply-chain/
https://www.darkreading.com/remote-workforce/china-silk-typhoon-it-supply-chain-attacks
https://thehackernews.com/2025/03/china-linked-silk-typhoon-expands-cyber.html
https://www.security.com/threat-intelligence/ransomware-trends-2025
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-317a
https://www.reliaquest.com/blog/inc-ransom-attack-analysis-extortion-methodologies/
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-242a
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-241a
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-207a
https://securityaffairs.com/164838/breaking-news/excobalt-cybercrime-group-targets-russian-orgs.html
https://services.google.com/fh/files/misc/m-trends-2024.pdf
https://therecord.media/xerox-xbs-cyberattack?&web_view=true
https://github.com/chengbochuan3/CVE-Network-Device
https://github.com/hakimkt/CitrixScope-Citrix-Vulnerability-Intelligence-Scanner
https://github.com/J3ff-R3y/network-scanner-cmdb
https://github.com/hermestoola/bb-hunter-pro
https://github.com/Lad1411/CVEs-matching
https://github.com/Cyb3rTim/Cyber-Threat-Intelligence-Dashboard
https://github.com/Aicks/Citrix-CVE-2023-3519
https://github.com/JonaNeidhart/CVE-2023-3519-BackdoorCheck
https://github.com/Chocapikk/CVE-2023-3519
https://github.com/zerbaliy3v/nuclei-cve-2023-all-templates
https://github.com/zerbaliy3v/cusom-nuclei-templates
https://github.com/KR0N-SECURITY/CVE-2023-3519
https://github.com/SalehLardhi/CVE-2023-3519
Details
Published: 2023-07-19
Updated: 2026-08-05
Known Exploited Vulnerability (KEV)
Risk Information
CVSS v2
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Severity: Critical
CVSS v3
Base Score: 9.8
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: Critical
EPSS
EPSS: 0.99749
Vulnerability Watch
Tenable Research has classified this CVE under the following Vulnerability Watch classification, which includes active and historical (inactive) classifications. You can learn more about these classifications on our blog.
Vulnerability of Concern