[IT 알아보기]/보안 이슈

[보안 이슈] 현재 악용되고 있는 Exploit(Update. 2023-10-18)

이호스트ICT 2023. 10. 20. 07:38

현재 자주 악용되고 있는 취약점 목록으로, 취약한 버전의 SW를 사용 중인 경우 긴급 패치를 권고 드립니다.
*
참조 링크https://www.cisa.gov/known-exploited-vulnerabilities-catalog

cveID vendorProject vulnerabilityName dateAdded shortDescription requiredAction dueDate
CVE-2023-4966 Citrix Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability 2023-10-18 Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. 2023-11-08