https://worldofeuc.com logo
Join Slack
Powered by
A new CVE for NetScaler incoming? Does anyone have...
# citrix-netscaler
t
A new CVE for NetScaler incoming? Does anyone have some more info? NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2025-5349 and CVE-2025-5777. There seems to be a new firmware version from today?
t
t
The link redirects me to the support homepage
t
CTX693420.pdf
CTX693420.pdf
m
j
Goes all the way back to 12.1 as well. I sent out a blanket email to the NetScaler customers I worked with in the last few months to update.
If you are on 14.1, stick with the firmware released today, not the one from last week. The one from last week has a bug in the SSH engine that can break HA sync and your ability to remote in.
m
Thanks for the PDF. As usual, their site crashed
j
Date shuffle for the latest 2 builds? Which version should we use?
j
43.56
❤️ 1
47.46 breaks ssh if you enabled key based authentication.
👍 2
c
just doing my UAT netscaler now no issues with CTX article or grabbing the .tgz from download page timing out/crashing which makes a change
n
https://www.deyda.net/index.php/en/2025/06/17/checklist-for-netscaler-citrix-adc-cve-2025-5777/ According to this blog, "several working exploits have been published" - couldn't find much information regarding that as of yesterday.
e
Please email secure@cloud.com if anyone has ANY evidence that an exploit has been published or used.
👍 1
m
That blog post looks like a copy & paste of previous ones they have. Kind of thinking it isn’t true. They have the exact same verbiage on older CVEs
💯 1
n
I thought the same as well but just wondered if somebody saw something I didnt
m
Maybe we just ask the author @Deyda
c
There isn't any known exploits the article is a copy paste from his old Netscaler CVE article
d
Sry copy Paste
👍🏼 1
👍 2
Open in Slack
PreviousNext
Powered by