NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2025-6543

[testperson 1.806]

Hi,

 

Groundhog day: CITRIX | Support ;)

 

NetScaler ADC and NetScaler Gateway contain the vulnerability mentioned below:

CVE-ID	Description	Pre-conditions	CWE	CVSSv4
CVE-2025-6543	Memory overflow vulnerability leading to unintended control flow and Denial of Service	NetScaler must be configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server	CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer	CVSS v4.0 Base Score: 9.2 (CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L)

 

Happy patching :)

Jan