{"id":"CVE-2025-6543","state":"PUBLISHED","title":"Memory overflow vulnerability leading to unintended control flow and Denial of Service","description":"Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server","publishedAt":"2025-06-25T12:49:57.896Z","updatedAt":"2026-02-26T17:50:24.557Z","severity":{"score":9.2,"label":"Critical","version":"4.0","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L","source":"Citrix"},"assigner":"Citrix","products":["NetScaler ADC","NetScaler Gateway"],"affected":[{"vendor":"NetScaler","product":"ADC","defaultStatus":"unaffected","versions":[{"version":"14.1","status":"affected","lessThan":"47.46","versionType":"patch"},{"version":"13.1","status":"affected","lessThan":"59.19","versionType":"patch"},{"version":"13.1 FIPS and NDcPP","status":"affected","lessThan":"37.236","versionType":"patch"}]},{"vendor":"NetScaler","product":"Gateway","defaultStatus":"unaffected","versions":[{"version":"14.1","status":"affected","lessThan":"47.46","versionType":"patch"},{"version":"13.1","status":"affected","lessThan":"59.19","versionType":"patch"},{"version":"13.1 FIPS and NDcPP","status":"affected","lessThan":"37.236","versionType":"patch"}]}],"references":["https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694788","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-6543"],"weaknesses":["CWE-119"],"ingestedAt":"2026-10-29T20:10:04.440Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/6xxx/CVE-2025-6543.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-6543","state":"PUBLISHED","datePublished":"2025-06-25T12:49:57.896Z","dateUpdated":"2026-02-26T17:50:24.557Z","assignerShortName":"Citrix","assignerOrgId":"e437aed5-38e0-4fa3-a98b-cb73e7acaec6","dateReserved":"2025-06-23T18:08:23.912Z"},"containers":{"cna":{"title":"Memory overflow vulnerability leading to unintended control flow and Denial of Service","descriptions":[{"lang":"en","value":"Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server"}],"affected":[{"vendor":"NetScaler","product":"ADC","defaultStatus":"unaffected","versions":[{"version":"14.1","status":"affected","lessThan":"47.46","versionType":"patch"},{"version":"13.1","status":"affected","lessThan":"59.19","versionType":"patch"},{"version":"13.1 FIPS and NDcPP","status":"affected","lessThan":"37.236","versionType":"patch"}]},{"vendor":"NetScaler","product":"Gateway","defaultStatus":"unaffected","versions":[{"version":"14.1","status":"affected","lessThan":"47.46","versionType":"patch"},{"version":"13.1","status":"affected","lessThan":"59.19","versionType":"patch"},{"version":"13.1 FIPS and NDcPP","status":"affected","lessThan":"37.236","versionType":"patch"}]}],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694788"}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","baseScore":9.2,"baseSeverity":"CRITICAL","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-119","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Citrix","orgId":"e437aed5-38e0-4fa3-a98b-cb73e7acaec6","dateUpdated":"2025-06-25T12:49:57.896Z"},"datePublic":"2025-06-25T12:30:00.000Z","source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","references":[{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-6543","tags":["government-resource"]}],"metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-6543","role":"CISA Coordinator","options":[{"Exploitation":"active"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-07-17T03:55:32.992762Z"}}},{"other":{"type":"kev","content":{"dateAdded":"2025-06-30","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-6543"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-26T17:50:24.557Z"},"timeline":[{"time":"2025-06-30T00:00:00.000Z","lang":"en","value":"CVE-2025-6543 added to CISA KEV"}]}]}}}