CVE-2025-7775
BaseFortify
Publication date: 2025-08-26
Last updated on: 2025-10-24
Assigner: Citrix Systems, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| citrix | netscaler_application_delivery_controller | From 12.1 (inc) to 12.1-55.330 (exc) |
| citrix | netscaler_application_delivery_controller | From 12.1 (inc) to 12.1-55.330 (exc) |
| citrix | netscaler_application_delivery_controller | From 13.1 (inc) to 13.1-37.241 (exc) |
| citrix | netscaler_application_delivery_controller | From 13.1 (inc) to 13.1-37.241 (exc) |
| citrix | netscaler_application_delivery_controller | From 13.1 (inc) to 13.1-59.22 (exc) |
| citrix | netscaler_application_delivery_controller | From 14.1 (inc) to 14.1-47.48 (exc) |
| citrix | netscaler_gateway | From 13.1 (inc) to 13.1-59.22 (exc) |
| citrix | netscaler_gateway | From 14.1 (inc) to 14.1-47.48 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-119 | The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a memory overflow issue in NetScaler ADC and NetScaler Gateway products. It can lead to Remote Code Execution and/or Denial of Service when NetScaler is configured as a Gateway (such as VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server. It also affects certain load balancing virtual servers (HTTP, SSL, HTTP_QUIC) bound with IPv6 services or service groups, and CR virtual servers of type HDX.
How can this vulnerability impact me? :
The vulnerability can allow attackers to execute arbitrary code remotely or cause a denial of service on the affected NetScaler ADC and Gateway devices. This can disrupt network services, potentially allowing unauthorized access or causing service outages.