CVE-2025-6543

Published: Jun 25, 2025Updated: Oct 24, 2025 Sources: CVE List NVD BDUCWE-119

9.8CRITICAL

NVD MITRE

Description

Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

No summary for this CVE yet.

CVSS Vector Breakdown

Exploitability

AV:NAttack Vector

Network

AC:LAttack Complexity

Low

PR:NPrivileges Required

None

UI:NUser Interaction

None

Scope

S:UScope

Unchanged

Impact

C:HConfidentiality

High

I:HIntegrity

High

A:HAvailability

High

Open in CVSS calculator →

Weaknesses

CWE-119

Affected Products

NetScaler

commercial·USaka citrix, netscaler gateway firmware, xenserver, application delivery controller firmware

netscaler application delivery controllerOn-premNetwork Device

Networking Infrastructure / load-balancer-proxy

netscaler gatewayOn-premSecurity Product

Networking Infrastructure

ADCOn-prem

Networking Infrastructure / load-balancer-proxy

GatewayOn-prem

Networking Infrastructure / load-balancer-proxy

Citrix Systems Inc.

commercial·USaka netscaler gateway, citrix gateway, citrix adc

NetScaler Application Delivery ControllerOn-premNetwork Device

Networking Infrastructure / load-balancer-proxy

NetScaler GatewayOn-premNetwork Device

Networking Infrastructure

Exploitability

CISA Known Exploited Vulnerability

Added to KEV:Jun 30, 2025

Remediation due:Jul 21, 2025

Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Official Patch Available

Is your org exposed to CVE-2025-6543?Request an assessment to establish which checks are appropriate for your systems. Check my exposure

Attack Graph

Products CVE Techniques Tactics

Click technique nodes for MITRE ATT&CK details · drag to pan · Ctrl/⌘ + scroll to zoom, or go fullscreen.

MITRE ATT&CK

2 techniques

Initial Access

Privilege Escalation

View detailed technique mapping

References

https://nvd.nist.gov/vuln/detail/CVE-2025-6543

nvd.nist.gov

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694788

support.citrix.com

https://www.esentire.com/security-advisories/actively-exploited-citrix-vulnerability-cve-2025-6543

esentire.com

and 4 more references View all →

Unlock Complete Vulnerability Intelligence

Get the full picture for CVE-2025-6543 and every CVE in our database. Create a free account — no credit card required.

Create Free Account

Plain-language analysis

Impact assessment and exploitation scenario in plain English

Attack graph visualization

Interactive attack path and kill chain mapping

Exploit details & PoC links

ExploitDB, Metasploit, GitHub PoCs with direct links

Nuclei scanner templates

Ready-to-use vulnerability scanner templates

Full remediation guide

Patch instructions, workarounds, and compliance impact

Interactive AI chat

Ask questions about this vulnerability in natural language

Related vulnerabilities

Semantically similar CVEs and attack patterns

REST API & MCP access

Integrate vulnerability data into your workflows