This message was deleted.
# citrix-netscalers
Slackbot
07/07/2023, 9:02 PMThis message was deleted.
🤔 1
👀 10
b
Balint Oberrauch
07/08/2023, 5:24 AMvacation planned for thursday 🙄
🙌 1
d
Daniel Marsh
07/10/2023, 12:21 AMFrom our NetScaler tech rep - "Yes, I am aware of it and we will have a response today / tomorrow."
a
Arthur
07/10/2023, 4:45 AMYes - Already saw video with PoC 🤷🏻♂️ … it seems to be limited to management port.
j
Jan Tytgat
07/10/2023, 10:43 AM@Arthur do you have a link?
👍 1
a
Arthur
07/10/2023, 12:40 PMCheck DM
🎯 1
f
Felix Marte
07/10/2023, 1:46 PMAnyone have confirmation if this is limited to 13.1? And @Arthur would you mind sending me the link also? Been tracking this since 7/3...
👍 1
a
Arthur
07/10/2023, 4:49 PMAny numbers ? 🤔
f
Felix Marte
07/10/2023, 4:54 PMI agree. It implies the python script was able to affect root elevation in an unexpected way. But the python script could just be making api calls with valid root creds for all we know. Plus it looks like its running against a barebones VPX with free license that probably hasn't had even the basic recommendations applied to it - prime being not have access to the management interface exposed to the internet 😉 I am reluctant to dismiss the validity of a threat, but so far there has been very little in the form of details and proof, and still no official word.
💯 1
j
Jan Tytgat
07/10/2023, 4:55 PMYou’d be surprised how many NetScalers have their management accessible from the internet
😬 2
🤔 1
p
Preston Gallwas (Atum)
07/11/2023, 1:43 AMPretend for a moment twitter is a dumpster fire owned by a megalomaniac and the post is currently unavailable...is this the same thing as the thing last week?
d
Daniel Marsh
07/11/2023, 1:45 AMNo this is a new issue. Citrix said there would be a security bulletin from them, but I haven't seen anything yet.
d
Daniel Madsen
07/11/2023, 9:37 PMDaniel Madsen
07/11/2023, 9:37 PMd
Daniel Marsh
07/11/2023, 11:23 PMThese are for the Secure Access Client (VPN client) only, not the NetScaler appliance itself. I think that one is still to be announced.
💯 1
a
Arthur
07/12/2023, 5:40 AMArthur
07/12/2023, 4:12 PMQuick summary: information about zero day seems to be fake because of lack of proof from potential seller. 🤷🏻♂️
s
Sebastian Parelius
07/18/2023, 12:04 PMSebastian Parelius
07/18/2023, 12:08 PMI'm just getting a restricted content error..
j
Jan Tytgat
07/18/2023, 12:08 PMCorrect, info is not released yet
Jan Tytgat
07/18/2023, 12:09 PMYou can expect it soon I guess, given that the firmware is available
s
Sebastian Parelius
07/18/2023, 12:40 PMUpgraded first box now, went well 🙂
j
Jan Tytgat
07/18/2023, 12:40 PMLikewise
o
Owen Reynolds
07/18/2023, 1:53 PMStill getting access denied on https://support.citrix.com/article/CTX561482
Any idea when this will be officially announced?
j
Jan Tytgat
07/18/2023, 1:53 PMIt just went live
o
Owen Reynolds
07/18/2023, 1:54 PM😂 60 seconds later, it opens! Amazing
j
Jan Tytgat
07/18/2023, 1:54 PMI think everybody is refreshing 😄
😂 1
a
Arthur
07/18/2023, 1:54 PMDDoS 🤣
😂 1
s
Sebastian Parelius
07/18/2023, 2:14 PMhappy patching, everyone!
👍 1
Sebastian Parelius
07/18/2023, 2:24 PManyone upgraded a gateway instance yet?
j
Jan Tytgat
07/18/2023, 2:24 PMTonight
👍 1
Jan Tytgat
07/18/2023, 2:24 PMgot a regular one, which went fine
Jan Tytgat
07/18/2023, 2:25 PMthe one tonigth is an upgrade from 12.1
Jan Tytgat
07/18/2023, 2:25 PMexcited 😄
s
Sebastian Parelius
07/18/2023, 2:25 PMokay, i'm not waiting, will do it shortly
🔥 1
Sebastian Parelius
07/18/2023, 2:54 PMupgrade of gateway instance seems good. everything seems to work as it should
n
Neal Dolson
07/18/2023, 3:42 PMUpgraded a standalone 13.0 instance without issue
10 Views