VDB
CVE-2025-5777
CVE-2025-5777
PUBLISHED
KEV
CVSS 6.900000095367432 MEDIUM
Citrix Application Delivery Controller (ADC) ist eine Lösung zur Anwendungsbereitstellung und Lastverteilung. Citrix NetScaler ist eine integrierte Lösung für die Beschleunigung, das Traffic Management und die Sicherheit von Web-Applikationen. Citrix Access Gateway ist ein universell einsetzbares SSL-VPN. Advanced Access Control (AAC) ermöglichen es Administratoren, Zugriffsregeln für das Access Gateway festzulegen.
EPSS 99.97% · 100.0th percentile
Risk Scores
CVSS 4.0
6.900000095367432
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
99.97%
100.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Citrix Systems | Citrix Systems NetScaler Gateway <13.1-58.32 | |
| Citrix Systems | Citrix Systems ADC <13.1-37.235-FIPS | |
| Citrix Systems | Citrix Systems ADC <13.1-58.32 | |
| Citrix Systems | Citrix Systems ADC <13.1-37.235-NDcPP | |
| Citrix Systems | Citrix Systems NetScaler Gateway <14.1-43.56 | |
| Citrix Systems | Citrix Systems ADC <14.1-43.56 | |
| Citrix Systems | Citrix Systems ADC <12.1-55.328-FIPS |
Timeline
- Jun 17, 2025 CVE Published
- Jun 17, 2025 PoC Published
- Jun 17, 2025 PoC Published
- Jun 17, 2025 PoC Published
- Jun 17, 2025 PoC Published
- Jun 18, 2025 EPSS Score
- Jun 18, 2025 PoC Published
- Jun 18, 2025 PoC Published
- Jun 18, 2025 PoC Published
- Jun 18, 2025 PoC Published
- Jun 18, 2025 PoC Published
- Jun 18, 2025 PoC Published
References
- Nuclei Template exploit
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1349.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1349 advisory
- https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX693420 advisory
- https://reliaquest.com/blog/threat-spotlight-citrix-bleed-2-vulnerability-in-netscaler-adc-gateway-devices/ advisory