Outbreak Alert: Citrix Bleed Attack

FortiRecon provides outside-in coverage for risks toward customers. External Attack Surface Management helps customers identify exposure to known and unknown enterprise assets and associated vulnerabilities across the enterprise. The Vulnerability Intelligence Module under Adversary Centric Intelligence (ACI) provides a realistic view of the impact of the vulnerability based upon chatter and discussion of the same across various external sources such as Darkweb, social media, News / Blogs etc. 

CVE ID    

CVE-2023-4966 

CVE Title    

Citrix NetScaler ADC and NetScaler Gateway Information Disclosure 

CVE Severity    

 High 

ACI Coverage    

• 3 ACI reporting (OSINT) for this vulnerability 
• Discussion on 1 Darknet Forum
  • Ramp forum
    

• 45 articles referencing this CVE on the security blog.    
• 9 public code repositories containing possible POC exploits for this vulnerability.
  

Exploited 

Yes 

Exploited By Threat Actor(s) 

Unknown 

EASM Scanner    

No