It seems a worldwide UDP:443 (EDT) DDOS attack against #NetScaler#gateway is active since last night. I found these source IP addresses of the attackers in my nstraces:
45.200.42.0/24
220.167.109.0/24
45.248.9.195
206.71.159.131
46.229.195.108
117.27.239.154
13.69.68.47
(1/3)
@virtuEs_IT@CJeucken@EdwinHouben @MartijnHS @WilcovanBragt Bij het volgende wetenschappelijk onderzoek bied ik me wel aan om de resultaten vast te leggen ipv zelf onderdeel van onderzoek te zijn dan😜🤢
Citrix releases a fix for ADC/NetScaler versions 11.1 and 12.0 #CVE-2019-19781#NetScaler. Permanent fixes for ADC versions 11.1 and 12.0 are available now : https://t.co/laLuCk8mVk
@arbeijer To be sure we requested new disks, but the came up with a instruction how to completely reimage the system. According to the document the result would be the same
Need to wipe out an Citrix ADC/NetScaler MPX/SDX as result of #CVE-2019-19781. Citrix released a cleaning tool for a fresh start! Contact Citrix Support for download link. Now we have to wait for the expected patched build!
We were able to have a chat with the @Citrix CISO regarding the recent CVE and exploit on NetScaler in regards to the updated SANS information about the HTTP headers. We received this email from the security team and are allowed to make this info public! @mbp_netscaler@jantytgat