CVE-2025-6543

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694788 ; https://www.netscaler.com/blog/news/netscaler-critical-security-updates-for-cve-2025-6543-and-cve-2025-5777/ ; https://nvd.nist.gov/vuln/detail/CVE-2025-6543

Remediation deadline: July 21, 2025

Description

Citrix NetScaler ADC and Gateway contain a buffer overflow vulnerability leading to unintended control flow and Denial of Service. NetScaler must be configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server.

Timeline

Published:June 30th, 2025 12:00 AM

Last modified:June 30th, 2025 12:00 AM

Added to KEV:June 30th, 2025

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

Citrix

Products

NetScaler ADC and Gateway

Weaknesses (CWE)

CWE-119

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute