# MA-1094.072024: MyCERT Advisory - Citrix Releases Security Updates for Multiple Products

**Date:** 12 Jul 2024  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-1094.072024  
**Advisory ID:** MA-1094.072024

---

**1.0 Introduction**
Citrix released security updates to address vulnerabilities in multiple Citrix products.
**2.0 Impact**
A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system.
**3.0 Affected Products**
- NetScaler ADC and NetScaler Gateway.
- NetScaler Console, Agent and SVM.
- Citrix Workspace app for HTML5.
- Citrix Provisioning.
- Windows Virtual Delivery Agent for CVAD and Citrix Daas.
- Citrix Workspace app for Windows.
**4.0 Recommendations**
CyberSecurity Malaysia encourages users and administrators to review the [Citrix Security Bulletin](https://support.citrix.com/knowledge-center#/) and apply the necessary updates.
Kindly refer to the following URL for more information: 
- NetScaler ADC and NetScaler Gateway: [NetScaler ADC and NetScaler Gateway Security Update for CVE-2024-5491 and CVE-2024-5492](https://support.citrix.com/article/CTX677944/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20245491-and-cve20245492)
- NetScaler Console, Agent and SVM: [NetScaler Console, Agent and SVM Security Update for CVE-2024-6235 and CVE-2024-6236](https://support.citrix.com/article/CTX677998/netscaler-console-agent-and-svm-security-bulletin-for-cve20246235-and-cve20246236)
- Citrix Workspace app for HTML5: [Citrix Workspace app for HTML5 Security Bulletin CVE-2024-6148 and CVE-2024-6149](https://support.citrix.com/article/CTX678037/citrix-workspace-app-for-html5-security-bulletin-cve20246148-and-cve20246149)
- Citrix Provisioning: [Citrix Provisioning Security Bulletin CVE-2024-6150](https://support.citrix.com/article/CTX678025/citrix-provisioning-security-bulletin-cve20246150)
- Windows Virtual Delivery Agent for CVAD and Citrix Daas: [Windows Virtual Delivery Agent for CVAD and Citrix DaaS Security Bulletin CVE-2024-6151](https://support.citrix.com/article/CTX678035/windows-virtual-delivery-agent-for-cvad-and-citrix-daas-security-bulletin-cve20246151)
- Citrix Workspace app for Windows: [Citrix Workspace app for Windows Security Bulletin CVE-2024-6286](https://support.citrix.com/article/CTX678036/citrix-workspace-app-for-windows-security-bulletin-cve20246286)
Generally, we advise users of these devices to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact us through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 08:30 -17:30 MYT 
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
**5.0    References**
- <https://www.cisa.gov/news-events/alerts/2024/07/09/citrix-releases-security-updates-multiple-products>
- <https://support.citrix.com/article/CTX678025/citrix-provisioning-security-bulletin-cve20246150>
- <https://support.citrix.com/article/CTX678035/windows-virtual-delivery-agent-for-cvad-and-citrix-daas-security-bulletin-cve20246151>
- <https://support.citrix.com/article/CTX678036/citrix-workspace-app-for-windows-security-bulletin-cve20246286>
- <https://support.citrix.com/article/CTX677998/netscaler-console-agent-and-sdx-security-bulletin-for-cve20246235-and-cve20246236>
- <https://support.citrix.com/article/CTX677944/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20245491-and-cve20245492>
- <https://support.citrix.com/article/CTX678037/citrix-workspace-app-for-html5-security-bulletin-cve20246148-and-cve20246149>