NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2025-6543

testperson · 25. Juni

Hi,

Groundhog day: CITRIX | Support ;)

NetScaler ADC and NetScaler Gateway contain the vulnerability mentioned below:

CVE-ID

Description

Pre-conditions

CWE

CVSSv4

CVE-2025-6543

Memory overflow vulnerability leading to unintended control flow and Denial of Service

NetScaler must be configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

CVSS v4.0 Base Score: 9.2

(CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L)

Happy patching :)

Jan

Empfohlene Beiträge