9.3Kritisch KEV In Ransomware genutzt

CVE-2025-5777NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread

NetScaler ADC; NetScaler Gateway Veröffentlicht: 2025-06-17 15:29 (vor 1 Jahr)

Bekannt ausgenutzt — Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability

CISA hat am 10.07.2025 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 11.07.2025.

Erforderliche Maßnahme: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX693420 ; https://nvd.nist.gov/vuln/detail/CVE-2025-5777

Beschreibung

Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

Schwachstellentyp (CWE): CWE-125 CWE-908

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Hersteller	Produkt	Versionen
citrix	netscaler application delivery controller	12.1 – < 12.1-55.328
citrix	netscaler gateway	13.1 – < 13.1-58.32
NetScaler	ADC	14.1 – < 43.56, 13.1 – < 58.32
NetScaler	Gateway	14.1 – < 43.56, 13.1 – < 58.32

Referenzen und Patches

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX693420 Vendor Advisory
https://citrixbleed.com Broken LinkThird Party Advisory
https://horizon3.ai/attack-research/attack-blogs/cve-2025-5777-citrixbleed-2-write-up-maybe/ Third Party Advisory
https://labs.watchtowr.com/how-much-more-must-we-bleed-citrix-netscaler-memory-disclosure-citrixbleed-2-cve-2… Third Party Advisory
https://www.bleepingcomputer.com/news/security/cisa-tags-citrix-bleed-2-as-exploited-gives-agencies-a-day-to-patch/ Press/Media CoverageThird Party Advisory
https://www.netscaler.com/blog/news/netscaler-critical-security-updates-for-cve-2025-6543-and-cve-2025-5777/ Third Party Advisory
https://www.theregister.com/2025/07/10/cisa_citrixbleed_kev/ Press/Media Coverage
https://doublepulsar.com/citrixbleed-2-exploitation-started-mid-june-how-to-spot-it-f3106392aa71 Third Party Advisory
https://reliaquest.com/blog/threat-spotlight-citrix-bleed-2-vulnerability-in-netscaler-adc-gateway-devices/ Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-5777 US Government Resource

CPE-Treffer (NVD) (7)

cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:* ≥ 12.1 < 12.1-55.328
cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:* ≥ 13.1 < 13.1-37.235
cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:* ≥ 13.1 < 13.1-37.235
cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:* ≥ 13.1 < 13.1-58.32
cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:* ≥ 14.1 < 14.1-43.56
cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:* ≥ 13.1 < 13.1-58.32
cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:* ≥ 14.1 < 14.1-43.56

CVSS-Score

9.3Kritisch

Quelle: Citrix · CVSS 4.0

Angriffsvektor: Netzwerk
Komplexität: Niedrig
Voraussetzungen: Keine
Rechte erforderlich: Keine
Benutzerinteraktion: Keine
Vertraulichkeit: Hoch
Integrität: Hoch
Verfügbarkeit: Hoch

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

Alle Scores (3)

cna	CVSS 4.0	9.3Kritisch
secure@citrix.com	CVSS 4.0	9.3Kritisch
nvd	CVSS 3.1	7.5Hoch

EPSS (Ausnutzungswahrscheinlichkeit in 30 Tagen)

99.97%

höher als 100 % aller CVEs

CISA-Bewertung (SSVC)

Ausnutzung: active
Automatisierbar: yes
Technische Auswirkung: total

Zeitverlauf

ID reserviert2025-06-06
Veröffentlicht2025-06-17 15:29
Bei IP-DB eingegangen2026-10-24 23:30
In KEV aufgenommen2025-07-10
Zuletzt aktualisiert2026-10-08 13:35

Vergeben von (CNA): Citrix
NVD-Status: Analyzed

In der Quelle ansehen: CVE.org · NVD

Benachrichtigung bei neuen Schwachstellen in diesen Produkten

E-Mail-Warnungen aktivieren

Kostenlos · mit Konto · jederzeit abbestellbar

Neue CVEs im selben Produkt — Citrix NetScaler ADC / Gateway

9.5Kritisch

CVE-2026-107406 vor 24 Tagen

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

NetScaler ADC; NetScaler Gateway

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements: …

1.9%EPSS

8.7Hoch

CVE-2026-88779 KEV vor 29 Tagen

Memory overflow vulnerability leading to Denial of Service

NetScaler ADC; NetScaler Gateway

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.

11%EPSS

8.8Hoch

CVE-2026-88778 vor 1 Monat

TCP Initial Sequence Number (ISN) prediction

Citrix NetScaler ADC; Citrix NetScaler Gateway

Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1…

8.8Hoch

CVE-2026-88777 vor 1 Monat

Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

Citrix NetScaler ADC; Citrix NetScaler Gateway

Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and befo…

8.8Hoch

CVE-2026-88776 vor 1 Monat

Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

Citrix NetScaler ADC; Citrix NetScaler Gateway

8.8Hoch

CVE-2026-88775 vor 1 Monat

Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

Citrix NetScaler ADC; Citrix NetScaler Gateway

Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 …