*#NetScaler CLI Snippet thread for #CVE201919781 compromised boxes*
SingleNode must be completely restored from the backup.
For HA-Pair you can failover to a secondary box that is not compromised. However, make sure that the CVE responder is installed.
#NetScalerRocks
(1/5)

You must change all local system user passwords:
[CLI]
set system user nsroot –password [New Password]
[2/5)

You must change all used services user passwords (e.g. for LDAP Bind):
[CLI]
set authentication ldapAction [ActionName] –ldapBindDnPassword [New Password]
[3/5)