CVE-2025-6543
What it is
Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
At a glance
- Exploitability
- Can be exploited over the network without logging in. High risk of data exposure, data tampering, service disruption.
- In the wild
- CISA lists this as exploited in real attacks. Treat as urgent.
- Fix
- A patch, advisory or fixed version is referenced. Upgrade or apply it.
Timeline
- ReservedThe CVE id was reserved by its CNA
- PublishedDisclosed publicly on CVE.org and NVD
- 2025-06-30 Exploited in the wildAdded to CISA's Known Exploited Vulnerabilities list
- 2025-07-21 Remediation deadlineCISA's due date for federal agencies to fix it
- Last updatedMost recent change to the record
Details
- Published
- Last modified
- Added to CISA KEV
- 2025-06-30
- Exploit probability
- 10.4% · EPSS, next 30 days
- Weakness
- CWE-119 · Buffer errors
- Record status
- Analyzed
Affected
- Citrix Netscaler Application Delivery Controller < 13.1-37.236
- Citrix Netscaler Application Delivery Controller < 13.1-59.19
- Citrix Netscaler Application Delivery Controller < 14.1-47.46
- Citrix Netscaler Gateway < 13.1-59.19
- Citrix Netscaler Gateway < 14.1-47.46
Attack profile CVSS 4.0 · 9.2
- Attack vector
- Network
- Complexity
- High
- Attack requirements
- Present
- Privileges needed
- None
- User interaction
- None
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Raw vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
