CVE-2025-6543 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	UNKNOWN				---
Citrix	CNA	---				---
CISA-ADP	ADP	---				---

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: Unknown

Common Weakness Enumeration

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

Vulnerability Media Exposure

[ENGLISH] Citrix Releases Emergency Patches for Actively Exploited CVE-2025-6543 in NetScaler ADC
Citrix has released security updates to address a critical flaw affecting NetScaler ADC that it said has been exploited in the wild. The vulnerability, tracked as CVE-2025-6543, carries a CVSS score of 9.2 out of a maximum of 10.0. It has been described as a case of memory overflow that could result in unintended control flow and denial-of-service. However, successful exploitation requires the
Published: 2025-06-25T20:21:00+05:30
[GERMAN] Jetzt patchen: Citrix warnt vor teils aktiv ausgenutzten Sicherheitslücken
In Citrix-Netscaler-Instanzen klaffen mehrere gefährliche Sicherheitslücken. Eine erinnert an Citrix Bleed, eine andere wird bereits ausgenutzt. (<a href="https://www.golem.de/specials/sicherheitsluecke/">Sicherheitslücke</a>, <a href="https://www.golem.de/specials/server/">Server</a>) <img alt="" height="1" src="https://cpx.golem.de/cpx.php?class=17&aid=197477&page=1&ts=1750922882" width="1" />
Published: 2025-06-26T09:28:09+02:00
[GERMAN] Citrix Systems NetScaler: Schwachstelle ermöglicht Denial of Service
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Citrix Systems NetScaler ausnutzen, um einen Denial of Service Angriff durchzuführen.
Published: 2025-06-25T22:00:00+00:00

References

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694788