---
title: "CVE-2023-4967: Denial of service"
url: https://erroneo.us/security/cve/CVE-2023-4967/
description: "CVE-2023-4967 (Cloud Software Group NetScaler ADC): Denial of Service in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual…"
type: vulnerability-record
section: "Security Digest"
date_published: 2023-10-27
date_modified: 2026-10-21
publisher: erroneo.us
author: erroneo.us Security Desk
cve: "CVE-2023-4967"
kev: false
cvss: 8.2
epss: 0.0109
license: All rights reserved. Quote with attribution and a link.
---

# CVE-2023-4967: Denial of service

**Signal:** Normal patch cycle. No exploitation signal; fix it in your next routine update if you are affected. (Computed from CISA KEV, EPSS and CVSS; not an editorial verdict.)

## Should you act?

- No confirmed exploitation. It is not in CISA’s KEV catalog and CISA’s SSVC assessment records no known exploitation. That can change quickly after a public write-up; re-check if you are affected.
- EPSS 1.1% , percentile 65: FIRST’s model estimates a 1.1% chance of exploitation activity in the next 30 days, higher than 65% of all scored CVEs (moderate). EPSS is a probability, not a verdict.
- Remotely reachable with no login and no user interaction. If the vulnerable service is exposed to the internet, prioritize it.
- Editorial verdict: Act now. Citrix Bleed: NetScaler Gateway Leaks Session Tokens — If a NetScaler configured as a Gateway or AAA server is still on a vulnerable build, assume it is being probed and patch, kill every session, and hunt; patching alone does not evict an attacker holding a stolen session.

## What it is

Denial of Service in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA Virtual Server

## Affected products (CVE record)

- Cloud Software Group NetScaler ADC: 14.1 < 8.50, 13.1 < 49.15, 13.0 < 92.19, 13.1-FIPS < 37.164, 12.1-FIPS < 55.300, 12.1-NDcPP < 55.300
- Cloud Software Group NetScaler Gateway: 14.1 < 8.50, 13.1 < 49.15, 13.0 < 92.19

## Severity

- Citrix CVSS 3.1: 8.2 `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H`

## Exploitation

- CISA KEV: not listed (no confirmed in-the-wild exploitation known to CISA).
- CISA SSVC assessment: exploitation none , automatable yes , technical impact partial .
- FIRST EPSS (model of 2026-10-21): 1.09% probability of exploitation activity in the next 30 days; percentile 65.

## Sources

- [CVE.org record CVE-2023-4967](https://www.cve.org/CVERecord?id=CVE-2023-4967)
- [NVD entry CVE-2023-4967](https://nvd.nist.gov/vuln/detail/CVE-2023-4967)
- [support.citrix.com](https://support.citrix.com/article/CTX579459/)

---
Source page: https://erroneo.us/security/cve/CVE-2023-4967/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt