CVE-2025-6543KEV · OVERDUECWE-119

Memory overflow vulnerability leading to unintended control flow and Denial of Service

Critical · published June 25, 2025

Patch now

Confirmed exploited, and the score agrees

CVSS calls it critical at 9.2. It is confirmed in active exploitation. It sits in the 95.8th percentile for exploit probability.

460
days past CISA
deadline
CVSS v4.0
9.2
EPSS
11%
Percentile
95.8
In the wild
Confirmed
What it is

🚨 Memory overflow alert! This vulnerability in NetScaler ADC and Gateway could lead to an unintended control flow and Denial of Service — a hacker's open door! 🔥 Think of this vulnerability like a crowded elevator that takes on too much weight and suddenly stops working. When too many requests slam into the NetScaler, it can throw the system off balance and come crashing down, rendering services inaccessible. An attacker could exploit this flaw, causing the affected services to crash, leading to a complete Denial of Service. This means users would be locked out of critical applications, resulting in chaos and frustration for all. Imagine the panic if your VPN goes down right when you need it most!

Put simply

Think of this vulnerability like a crowded elevator that takes on too much weight and suddenly stops working. When too many requests slam into the NetScaler, it can throw the system off balance and come crashing down, rendering services inaccessible. CVE-2025-6543 is a memory overflow vulnerability in NetScaler when configured as a Gateway or AAA virtual server. It allows attackers to manipulate control flow, resulting in service disruption and downtime.

What to do

An attacker could exploit this flaw, causing the affected services to crash, leading to a complete Denial of Service. This means users would be locked out of critical applications, resulting in chaos and frustration for all. Imagine the panic if your VPN goes down right when you need it most! Immediately patch your NetScaler ADC and Gateway systems to the latest version released by Citrix to mitigate this risk. Regularly monitor your service configurations and ensure that they comply with best security practices. Conduct a thorough security assessment to identify any other vulnerabilities lurking around! You've got this! Stay vigilant, patch up, and you'll keep your systems secure and running smoothly! 🛡️

The record
Technical detail
CVSS v4.0
9.2 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
EPSS
0.10562 · 95.8th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2025-06-25T12:49Z
KEV added
2025-06-30 · due 2025-07-21
EPSS history
Timeline
  • 30 JUN 00:00Z
    Added to CISA KEV — remediate by Jul 21
    kev
  • 25 JUN 12:49Z
    Memory overflow vulnerability leading to unintended control flow and Denial of Service
    cvelistv5