¡¾Îó²îͨ¸æ¡¿Citrix NetScaler ÄÚ´æ×ß©Îó²î (CVE-2025-5777)

Ðû²¼Ê±¼ä 2025-07-11

Ò»¡¢Îó²î¸ÅÊö


Îó²îÃû³Æ

Citrix NetScaler ÄÚ´æ×ß©Îó²î

CVE   ID

CVE-2025-5777

Îó²îÀàÐÍ

ÄÚ´æ×ß©

·¢Ã÷ʱ¼ä

2025-07-11

Îó²îÆÀ·Ö

9.3

Îó²îÆ·¼¶

ÑÏÖØ

¹¥»÷ÏòÁ¿

ÍøÂç

ËùÐèȨÏÞ

ÎÞ

ʹÓÃÄѶÈ

µÍ

Óû§½»»¥

²»ÐèÒª

PoC/EXP

ÒѹûÕæ

ÔÚҰʹÓÃ

δ·¢Ã÷


NetScaler ADC£¨Ç°³ÆCitrix ADC£©ºÍNetScaler Gateway£¨Ç°³ÆCitrix Gateway£©ÊÇÓÉCitrix¹«Ë¾ÌṩµÄ¸ßÐÔÄÜÓ¦Óý»¸¶ºÍÔ¶³Ì»á¿´·¨¾ö¼Æ»®¡£¡£¡£NetScaler ADCÖ¼ÔÚÓÅ»¯Ó¦ÓÃÐÔÄÜ¡¢Ìá¸ß¿ÉÓÃÐÔ²¢ÔöÇ¿Çå¾²ÐÔ£¬£¬£¬£¬£¬ÆÕ±éÓÃÓÚ¸ºÔØƽºâ¡¢ÄÚÈÝ»º´æºÍÓ¦ÓüÓËÙµÈÁìÓò¡£¡£¡£NetScaler GatewayÔòרעÓÚΪԶ³ÌÓû§ÌṩÇå¾²µÄÐéÄâרÓÃÍøÂ磨VPN£©»á¼û£¬£¬£¬£¬£¬Ö§³Ö¶àÒòËØÈÏÖ¤ºÍµ¥µãµÇ¼£¨SSO£©µÈ¹¦Ð§¡£¡£¡£Á½Õ߶¼Äܹ»×ÊÖúÆóÒµÔÚ°ü¹ÜÓ¦Óý»¸¶Ð§ÂʵÄͬʱ£¬£¬£¬£¬£¬È·±£Êý¾Ý´«ÊäºÍÓû§»á¼ûµÄÇå¾²ÐÔ¡£¡£¡£


2025Äê7ÔÂ11ÈÕ£¬£¬£¬£¬£¬°ÙÀÖ²©¼¯ÍÅVSRC¼à²âµ½Citrix NetScaler ·¢Ã÷ÁËÒ»¸öÑÏÖصÄÄÚ´æ×ß©Îó²î£¬£¬£¬£¬£¬Ó°Ïì¶à¸ö°æ±¾µÄNetScaler ADCºÍNetScaler Gateway¡£¡£¡£¹¥»÷Õß¿ÉÒÔͨ¹ýÔ¶³Ì¡¢Î´¾­Éí·ÝÑéÖ¤µÄ·½·¨£¬£¬£¬£¬£¬¶Áȡװ±¸ÄÚ´æÖеÄÃô¸ÐÐÅÏ¢£¬£¬£¬£¬£¬Èç»á»°ÁîÅÆ£¬£¬£¬£¬£¬´Ó¶øÈƹý¶àÒòËØÈÏÖ¤£¨MFA£©»úÖƲ¢Ð®ÖÆÓû§»á»°¡£¡£¡£ÕâʹµÃ¹¥»÷ÕßÄܹ»»ñµÃδ¾­ÊÚȨµÄ»á¼ûȨÏÞ£¬£¬£¬£¬£¬½øÒ»²½Î£¼°ÆóÒµÒªº¦ÏµÍ³µÄÇå¾²ÐÔ¡£¡£¡£¸ÃÎó²î²»µ«¿ÉÄܵ¼ÖÂÊý¾Ýй¶£¬£¬£¬£¬£¬»¹¿ÉÄÜʹ¹¥»÷Õß»ñµÃ¶ÔÊÜÓ°ÏìϵͳµÄÍêÈ«¿ØÖÆ£¬£¬£¬£¬£¬´Ó¶øÒý·¢¸üÆÕ±éµÄÇ徲Σº¦¡£¡£¡£


¶þ¡¢Ó°Ïì¹æÄ£


NetScaler ADC 14.1 < 14.1-43.56
NetScaler Gateway 14.1 < 14.1-43.56
NetScaler ADC < 13.1-58.32
NetScaler Gateway 13.1 < 13.1-58.32
NetScaler ADC 13.1-FIPS < 13.1-37.235-FIPS
NetScaler ADC 13.1-FIPS < 13.1-37.235-NDcPP
NDcPP < 13.1-37.235-FIPS
NDcPP < 13.1-37.235-NDcPP
NetScaler ADC 12.1-FIPS < 12.1-55.328-FIPS
NetScaler ADC ºÍ NetScaler Gateway °æ±¾ 12.1 ºÍ 13.0 ÒѽøÈëÉúÃüÖÜÆÚ¿¢Ê£¨EOL£©£¬£¬£¬£¬£¬²¢ÇÒ±£´æÎó²î£¬£¬£¬£¬£¬±ðµÄ£¬£¬£¬£¬£¬ËùÓÐʹÓà NetScaler ʵÀýµÄ Secure Private Access °²ÅžùÊÜ´ËÎó²îÓ°Ïì¡£¡£¡£


Èý¡¢Çå¾²²½·¥


3.1 Éý¼¶°æ±¾


¹Ù·½ÒÑÐû²¼ÐÞ¸´°æ±¾£¬£¬£¬£¬£¬½¨ÒéÓû§Éý¼¶ÖÁÈçÏ°汾
NetScaler ADC >= 14.1-43.56
NetScaler Gateway >= 14.1-43.56
NetScaler ADC >= 13.1-58.32
NetScaler Gateway >= 13.1-58.32
NetScaler ADC 13.1-FIPS >= 13.1-37.235-FIPS
NDcPP >= 13.1-37.235-FIPS
NetScaler ADC 12.1-FIPS >= 12.1-55.328-FIPS


±ðµÄ£¬£¬£¬£¬£¬ÔÚËùÓÐ NetScaler ×°±¸£¨°üÀ¨ HA ¶Ô»ò¼¯Èº£©Éý¼¶ÖÁÐÞ¸´°æ±¾ºó£¬£¬£¬£¬£¬½¨ÒéÔËÐÐÒÔÏÂÏÂÁîÒÔÖÕÖ¹ËùÓлµÄ ICA ºÍ PCoIP »á»°£º

kill icaconnection -all
kill pcoipConnection -all
×¢ÖØ£ºNetScaler ADC ºÍ NetScaler Gateway °æ±¾ 12.1 ºÍ 13.0 ÒÑ×èÖ¹Ö§³Ö£¨EOL£©£¬£¬£¬£¬£¬²»ÔÙÊÜÖ§³Ö¡£¡£¡£


ÏÂÔØÁ´½Ó£ºhttps://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX693420


3.2 ÔÝʱ²½·¥


ÔÝÎÞ¡£¡£¡£


3.3 ͨÓý¨Òé


?°´ÆÚ¸üÐÂϵͳ²¹¶¡£¬£¬£¬£¬£¬ïÔ̭ϵͳÎó²î£¬£¬£¬£¬£¬ÌáÉýЧÀÍÆ÷µÄÇå¾²ÐÔ¡£¡£¡£
?ÔöǿϵͳºÍÍøÂçµÄ»á¼û¿ØÖÆ£¬£¬£¬£¬£¬Ð޸ķÀ»ðǽսÂÔ£¬£¬£¬£¬£¬¹Ø±Õ·ÇÐëÒªµÄÓ¦Óö˿ڻòЧÀÍ£¬£¬£¬£¬£¬ïÔÌ­½«Î£ÏÕЧÀÍ£¨ÈçSSH¡¢RDPµÈ£©Ì»Â¶µ½¹«Íø£¬£¬£¬£¬£¬ïÔÌ­¹¥»÷Ãæ¡£¡£¡£
?ʹÓÃÆóÒµ¼¶Çå¾²²úÆ·£¬£¬£¬£¬£¬ÌáÉýÆóÒµµÄÍøÂçÇå¾²ÐÔÄÜ¡£¡£¡£
?ÔöǿϵͳÓû§ºÍȨÏÞÖÎÀí£¬£¬£¬£¬£¬ÆôÓöàÒòËØÈÏÖ¤»úÖƺÍ×îСȨÏÞÔ­Ôò£¬£¬£¬£¬£¬Óû§ºÍÈí¼þȨÏÞÓ¦¼á³ÖÔÚ×îµÍÏ޶ȡ£¡£¡£
?ÆôÓÃÇ¿ÃÜÂëÕ½ÂÔ²¢ÉèÖÃΪ°´ÆÚÐ޸ġ£¡£¡£


3.4 ²Î¿¼Á´½Ó


https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX693420
https://www.theregister.com/2025/07/07/citrixbleed_2_exploits/
https://nvd.nist.gov/vuln/detail/CVE-2025-5777