CVE-2025-6543—Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability

漏洞名称

Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability

描述

Citrix NetScaler ADC and Gateway contain a buffer overflow vulnerability leading to unintended control flow and Denial of Service. NetScaler must be configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

其他说明

• https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694788
• https://www.netscaler.com/blog/news/netscaler-critical-security-updates-for-cve-2025-6543-and-cve-2025-5777/
• https://nvd.nist.gov/vuln/detail/CVE-2025-6543

相关新闻文章

• Citrix NetScaler Under Active Recon for CVE-2026-3055 (CVSS 9.3) Memory Overread BugMarch 28, 2026
• Citrix Urges Patching Critical NetScaler Flaw Allowing Unauthenticated Data LeaksMarch 24, 2026
• Citrix Patches Three NetScaler Flaws, Confirms Active Exploitation of CVE-2025-7775August 26, 2025
• Over 3,000 NetScaler devices left unpatched against CitrixBleed 2 bugAugust 12, 2025
• Dutch NCSC Confirms Active Exploitation of Citrix NetScaler CVE-2025-6543 in Critical SectorsAugust 12, 2025

相关 CWE

• CWE-119