¡¾Îó²îͨ¸æ¡¿Citrix NetScaler ÄÚ´æ×ß©Îó²î (CVE-2025-5777)

Ðû²¼Ê±¼ä 2025-07-11

Ò»¡¢Îó²î¸ÅÊö


Îó²îÃû³Æ

Citrix NetScaler ÄÚ´æ×ß©Îó²î

CVE   ID

CVE-2025-5777

Îó²îÀàÐÍ

ÄÚ´æ×ß©

·¢Ã÷ʱ¼ä

2025-07-11

Îó²îÆÀ·Ö

9.3

Îó²îÆ·¼¶

ÑÏÖØ

¹¥»÷ÏòÁ¿

ÍøÂç

ËùÐèȨÏÞ

ÎÞ

ʹÓÃÄѶÈ

µÍ

Óû§½»»¥

²»ÐèÒª

PoC/EXP

ÒѹûÕæ

ÔÚҰʹÓÃ

δ·¢Ã÷


NetScaler ADC£¨Ç°³ÆCitrix ADC£©ºÍNetScaler Gateway£¨Ç°³ÆCitrix Gateway£©ÊÇÓÉCitrix¹«Ë¾ÌṩµÄ¸ßÐÔÄÜÓ¦Óý»¸¶ºÍÔ¶³Ì»á¿´·¨¾ö¼Æ»® ¡£NetScaler ADCÖ¼ÔÚÓÅ»¯Ó¦ÓÃÐÔÄÜ¡¢Ìá¸ß¿ÉÓÃÐÔ²¢ÔöÇ¿Çå¾²ÐÔ£¬ÆÕ±éÓÃÓÚ¸ºÔØÆ½ºâ¡¢ÄÚÈÝ»º´æºÍÓ¦ÓüÓËÙµÈÁìÓò ¡£NetScaler GatewayÔòרעÓÚΪԶ³ÌÓû§ÌṩÇå¾²µÄÐéÄâרÓÃÍøÂ磨VPN£©»á¼û£¬Ö§³Ö¶àÒòËØÈÏÖ¤ºÍµ¥µãµÇ¼£¨SSO£©µÈ¹¦Ð§ ¡£Á½Õß¶¼Äܹ»×ÊÖúÆóÒµÔÚ°ü¹ÜÓ¦Óý»¸¶Ð§ÂʵÄͬʱ£¬È·±£Êý¾Ý´«ÊäºÍÓû§»á¼ûµÄÇå¾²ÐÔ ¡£


2025Äê7ÔÂ11ÈÕ£¬×ðÁú¿­Ê±¼¯ÍÅVSRC¼à²âµ½Citrix NetScaler ·¢Ã÷ÁËÒ»¸öÑÏÖØµÄÄÚ´æ×ß©Îó²î£¬Ó°Ïì¶à¸ö°æ±¾µÄNetScaler ADCºÍNetScaler Gateway ¡£¹¥»÷Õß¿ÉÒÔͨ¹ýÔ¶³Ì¡¢Î´¾­Éí·ÝÑéÖ¤µÄ·½·¨£¬¶Áȡװ±¸ÄÚ´æÖеÄÃô¸ÐÐÅÏ¢£¬Èç»á»°ÁîÅÆ£¬´Ó¶øÈƹý¶àÒòËØÈÏÖ¤£¨MFA£©»úÖÆ²¢Ð®ÖÆÓû§»á»° ¡£ÕâʹµÃ¹¥»÷ÕßÄܹ»»ñµÃδ¾­ÊÚȨµÄ»á¼ûȨÏÞ£¬½øÒ»²½Î£¼°ÆóÒµÒªº¦ÏµÍ³µÄÇå¾²ÐÔ ¡£¸ÃÎó²î²»µ«¿ÉÄܵ¼ÖÂÊý¾Ýй¶£¬»¹¿ÉÄÜʹ¹¥»÷Õß»ñµÃ¶ÔÊÜÓ°ÏìϵͳµÄÍêÈ«¿ØÖÆ£¬´Ó¶øÒý·¢¸üÆÕ±éµÄÇ徲Σº¦ ¡£


¶þ¡¢Ó°Ïì¹æÄ£


NetScaler ADC 14.1 < 14.1-43.56
NetScaler Gateway 14.1 < 14.1-43.56
NetScaler ADC < 13.1-58.32
NetScaler Gateway 13.1 < 13.1-58.32
NetScaler ADC 13.1-FIPS < 13.1-37.235-FIPS
NetScaler ADC 13.1-FIPS < 13.1-37.235-NDcPP
NDcPP < 13.1-37.235-FIPS
NDcPP < 13.1-37.235-NDcPP
NetScaler ADC 12.1-FIPS < 12.1-55.328-FIPS
NetScaler ADC ºÍ NetScaler Gateway °æ±¾ 12.1 ºÍ 13.0 ÒѽøÈëÉúÃüÖÜÆÚ¿¢Ê£¨EOL£©£¬²¢ÇÒ±£´æÎó²î£¬±ðµÄ£¬ËùÓÐʹÓà NetScaler ʵÀýµÄ Secure Private Access °²ÅžùÊÜ´ËÎó²îÓ°Ïì ¡£


Èý¡¢Çå¾²²½·¥


3.1 Éý¼¶°æ±¾


¹Ù·½ÒÑÐû²¼ÐÞ¸´°æ±¾£¬½¨ÒéÓû§Éý¼¶ÖÁÈçϰ汾
NetScaler ADC >= 14.1-43.56
NetScaler Gateway >= 14.1-43.56
NetScaler ADC >= 13.1-58.32
NetScaler Gateway >= 13.1-58.32
NetScaler ADC 13.1-FIPS >= 13.1-37.235-FIPS
NDcPP >= 13.1-37.235-FIPS
NetScaler ADC 12.1-FIPS >= 12.1-55.328-FIPS


±ðµÄ£¬ÔÚËùÓÐ NetScaler ×°±¸£¨°üÀ¨ HA ¶Ô»ò¼¯Èº£©Éý¼¶ÖÁÐÞ¸´°æ±¾ºó£¬½¨ÒéÔËÐÐÒÔÏÂÏÂÁîÒÔÖÕÖ¹ËùÓÐÔ˶¯µÄ ICA ºÍ PCoIP »á»°£º

kill icaconnection -all
kill pcoipConnection -all
×¢ÖØ£ºNetScaler ADC ºÍ NetScaler Gateway °æ±¾ 12.1 ºÍ 13.0 ÒÑ×èÖ¹Ö§³Ö£¨EOL£©£¬²»ÔÙÊÜÖ§³Ö ¡£


ÏÂÔØÁ´½Ó£ºhttps://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX693420


3.2 ÔÝʱ²½·¥


ÔÝÎÞ ¡£


3.3 ͨÓý¨Òé


?°´ÆÚ¸üÐÂϵͳ²¹¶¡£¬ïÔ̭ϵͳÎó²î£¬ÌáÉý·þÎñÆ÷µÄÇå¾²ÐÔ ¡£
?ÔöǿϵͳºÍÍøÂçµÄ»á¼û¿ØÖÆ£¬Ð޸ķÀ»ðǽսÂÔ£¬¹Ø±Õ·ÇÐëÒªµÄÓ¦Óö˿ڻò·þÎñ£¬ïÔÌ­½«Î£ÏÕ·þÎñ£¨ÈçSSH¡¢RDPµÈ£©Ì»Â¶µ½¹«Íø£¬ïÔÌ­¹¥»÷Ãæ ¡£
?ʹÓÃÆóÒµ¼¶Çå¾²²úÆ·£¬ÌáÉýÆóÒµµÄÍøÂçÇå¾²ÐÔÄÜ ¡£
?ÔöǿϵͳÓû§ºÍȨÏÞÖÎÀí£¬ÆôÓöàÒòËØÈÏÖ¤»úÖÆºÍ×îСȨÏÞÔ­Ôò£¬Óû§ºÍÈí¼þȨÏÞÓ¦¼á³ÖÔÚ×îµÍÏÞ¶È ¡£
?ÆôÓÃÇ¿ÃÜÂëÕ½ÂÔ²¢ÉèÖÃΪ°´ÆÚÐÞ¸Ä ¡£


3.4 ²Î¿¼Á´½Ó


https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX693420
https://www.theregister.com/2025/07/07/citrixbleed_2_exploits/
https://nvd.nist.gov/vuln/detail/CVE-2025-5777