CVE-2025-5349 - Vulnerability Details - OpenCVE

Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact Low

Subsequent System Integrity Impact Low

Subsequent System Availability Impact Low

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

No data.

No data.

No data.

References

Link	Providers
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX693420

History

Tue, 17 Jun 2025 14:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Tue, 17 Jun 2025 12:45:00 +0000

Type	Values Removed	Values Added
Description		Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway
Title		NetScaler ADC and NetScaler Gateway - Improper access control on the NetScaler Management Interface
Weaknesses		CWE-1284
References		https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX693420
Metrics		cvssV4_0 `{'score': 8.7, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L'}`

MITRE

Status: PUBLISHED

Assigner: Citrix

Published: 2025-06-17T12:32:24.670Z

Updated: 2025-06-26T03:55:22.631Z

Reserved: 2025-05-30T06:53:21.233Z

Link: CVE-2025-5349

Vulnrichment

Updated: 2025-06-17T13:51:32.854Z

NVD

Status : Awaiting Analysis

Published: 2025-06-17T13:15:21.377

Modified: 2025-06-17T20:50:23.507

Link: CVE-2025-5349

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-5349", "assignerOrgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6", "state": "PUBLISHED", "assignerShortName": "Citrix", "dateReserved": "2025-05-30T06:53:21.233Z", "datePublished": "2025-06-17T12:32:24.670Z", "dateUpdated": "2025-06-26T03:55:22.631Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "ADC", "vendor": "NetScaler", "versions": [{"lessThan": "43.56", "status": "affected", "version": "14.1", "versionType": "patch"}, {"lessThan": "58.32", "status": "affected", "version": "13.1", "versionType": "patch"}]}], "datePublic": "2025-06-17T12:31:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<b><span style=\"background-color: rgb(255, 255, 255);\">Improper access control on the NetScaler Management Interface</span></b> in <b><span style=\"background-color: transparent;\">NetScaler</span><span style=\"background-color: transparent;\"> ADC\u202fand </span><span style=\"background-color: transparent;\">NetScaler</span><span style=\"background-color: transparent;\"> Gateway </span></b><br>"}], "value": "Improper access control on the NetScaler Management Interface in NetScaler ADC\u202fand NetScaler Gateway"}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "ADJACENT", "baseScore": 8.7, "baseSeverity": "HIGH", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "LOW", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "LOW", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-1284", "description": "CWE-1284 Improper Validation of Specified Quantity in Input", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6", "shortName": "Citrix", "dateUpdated": "2025-06-17T12:32:24.670Z"}, "references": [{"url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX693420"}], "source": {"discovery": "UNKNOWN"}, "title": "NetScaler ADC\u202fand NetScaler Gateway - Improper access control on the NetScaler Management Interface", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-06-25T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2025-5349"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-26T03:55:22.631Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-5349", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-06-17T13:50:41.489056Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-17T13:51:32.854Z"}}], "cna": {"title": "NetScaler ADC\u202fand NetScaler Gateway - Improper access control on the NetScaler Management Interface", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.7, "Automatable": "NOT_DEFINED", "attackVector": "ADJACENT", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "LOW", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "NetScaler", "product": "ADC", "versions": [{"status": "affected", "version": "14.1", "lessThan": "43.56", "versionType": "patch"}, {"status": "affected", "version": "13.1", "lessThan": "58.32", "versionType": "patch"}], "defaultStatus": "unaffected"}], "datePublic": "2025-06-17T12:31:00.000Z", "references": [{"url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX693420"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Improper access control on the NetScaler Management Interface in NetScaler ADC\u202fand NetScaler Gateway", "supportingMedia": [{"type": "text/html", "value": "<b><span style=\"background-color: rgb(255, 255, 255);\">Improper access control on the NetScaler Management Interface</span></b> in <b><span style=\"background-color: transparent;\">NetScaler</span><span style=\"background-color: transparent;\"> ADC\u202fand </span><span style=\"background-color: transparent;\">NetScaler</span><span style=\"background-color: transparent;\"> Gateway </span></b><br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1284", "description": "CWE-1284 Improper Validation of Specified Quantity in Input"}]}], "providerMetadata": {"orgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6", "shortName": "Citrix", "dateUpdated": "2025-06-17T12:32:24.670Z"}}}, "cveMetadata": {"cveId": "CVE-2025-5349", "state": "PUBLISHED", "dateUpdated": "2025-06-26T03:55:22.631Z", "dateReserved": "2025-05-30T06:53:21.233Z", "assignerOrgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6", "datePublished": "2025-06-17T12:32:24.670Z", "assignerShortName": "Citrix"}, "dataVersion": "5.1"}