9.3Crítica KEV Usada en ransomware

CVE-2025-5777NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread

NetScaler ADC; NetScaler Gateway Publicada: 2025-06-17 15:29 (hace 1 año)

Explotación conocida — Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability

CISA confirmó el 10.07.2025 que esta vulnerabilidad se usa en ataques reales. Plazo para las agencias federales de EE. UU.: 11.07.2025.

Acción requerida: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX693420 ; https://nvd.nist.gov/vuln/detail/CVE-2025-5777

Descripción

Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

Debilidad (CWE): CWE-125 CWE-908

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Fabricante	Producto	Versiones
citrix	netscaler application delivery controller	12.1 – < 12.1-55.328
citrix	netscaler gateway	13.1 – < 13.1-58.32
NetScaler	ADC	14.1 – < 43.56, 13.1 – < 58.32
NetScaler	Gateway	14.1 – < 43.56, 13.1 – < 58.32

Referencias y parches

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX693420 Vendor Advisory
https://citrixbleed.com Broken LinkThird Party Advisory
https://horizon3.ai/attack-research/attack-blogs/cve-2025-5777-citrixbleed-2-write-up-maybe/ Third Party Advisory
https://labs.watchtowr.com/how-much-more-must-we-bleed-citrix-netscaler-memory-disclosure-citrixbleed-2-cve-2… Third Party Advisory
https://www.bleepingcomputer.com/news/security/cisa-tags-citrix-bleed-2-as-exploited-gives-agencies-a-day-to-patch/ Press/Media CoverageThird Party Advisory
https://www.netscaler.com/blog/news/netscaler-critical-security-updates-for-cve-2025-6543-and-cve-2025-5777/ Third Party Advisory
https://www.theregister.com/2025/07/10/cisa_citrixbleed_kev/ Press/Media Coverage
https://doublepulsar.com/citrixbleed-2-exploitation-started-mid-june-how-to-spot-it-f3106392aa71 Third Party Advisory
https://reliaquest.com/blog/threat-spotlight-citrix-bleed-2-vulnerability-in-netscaler-adc-gateway-devices/ Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-5777 US Government Resource

Coincidencias CPE (NVD) (7)

cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:* ≥ 12.1 < 12.1-55.328
cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:* ≥ 13.1 < 13.1-37.235
cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:* ≥ 13.1 < 13.1-37.235
cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:* ≥ 13.1 < 13.1-58.32
cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:* ≥ 14.1 < 14.1-43.56
cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:* ≥ 13.1 < 13.1-58.32
cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:* ≥ 14.1 < 14.1-43.56

Puntuación CVSS

9.3Crítica

Fuente: Citrix · CVSS 4.0

Vector de ataque: Red
Complejidad: Baja
Requisitos: Ninguno
Privilegios: Ninguno
Interacción del usuario: Ninguna
Confidencialidad: Alto
Integridad: Alto
Disponibilidad: Alto

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

Todas las puntuaciones (3)

cna	CVSS 4.0	9.3Crítica
secure@citrix.com	CVSS 4.0	9.3Crítica
nvd	CVSS 3.1	7.5Alta

EPSS (probabilidad de explotación en 30 días)

99.97%

superior al 100 % de todas las CVE

Evaluación de CISA (SSVC)

Explotación: active
Automatizable: yes
Impacto técnico: total

Cronología

ID reservado2025-06-06
Publicada2025-06-17 15:29
Llegó a IP-DB2026-10-24 23:30
Añadida a KEV2025-07-10
Última actualización2026-10-08 13:35

Asignada por (CNA): Citrix
Estado en NVD: Analyzed

Ver en la fuente: CVE.org · NVD

Reciba un aviso cuando estos productos tengan una vulnerabilidad nueva

Activar alertas por correo

Gratis · con cuenta · se desactiva cuando quiera

CVE recientes del mismo producto — Citrix NetScaler ADC / Gateway

9.5Crítica

CVE-2026-107406 hace 1 mes

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

NetScaler ADC; NetScaler Gateway

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements: …

1.9%EPSS

8.7Alta

CVE-2026-88779 KEV hace 1 mes

Memory overflow vulnerability leading to Denial of Service

NetScaler ADC; NetScaler Gateway

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.

11%EPSS

8.8Alta

CVE-2026-88778 hace 1 mes

TCP Initial Sequence Number (ISN) prediction

Citrix NetScaler ADC; Citrix NetScaler Gateway

Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1…

8.8Alta

CVE-2026-88777 hace 1 mes

Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

Citrix NetScaler ADC; Citrix NetScaler Gateway

Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and befo…

8.8Alta

CVE-2026-88776 hace 1 mes

Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

Citrix NetScaler ADC; Citrix NetScaler Gateway

8.8Alta

CVE-2026-88775 hace 1 mes

Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

Citrix NetScaler ADC; Citrix NetScaler Gateway

Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 …