Description
Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NetScaler | ADC | 14.1 – < 47.46, 13.1 – < 59.19, 13.1 FIPS and NDcPP – < 37.236 | 47.46 |
| NetScaler | Gateway | 14.1 – < 47.46, 13.1 – < 59.19, 13.1 FIPS and NDcPP – < 37.236 | 47.46 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 3 repositories
-
abrewer251/CVE-2025-6543_CitrixNetScaler_PoC ★ 6 · Jul 3, 2025
Multi-host, multi-port scanner and auditor for CVE-2025-6543-affected NetScaler devices. Supports SNMP and SSH enumeration with optional CSV reporting and exploit stubs.
-
grupooruss/Citrix-cve-2025-6543 ★ 5 · Jun 26, 2025
Script para determinar si Citrix es vulnerable al CVE-2025-6543
-
lex1010/CVE-2025-6543 ★ 0 · Jun 30, 2025
Citrix Bleed 2 PoC
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 2
- WID-SEC-2025-1403 Citrix Systems NetScaler: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Jun 25, 2025
- NCSC-2025-0203 Kwetsbaarheid verholpen in Citrix NetScaler ADC en NetScaler Gateway NCSC-NL (Netherlands) · Jun 25, 2025