CVE-2025-7775
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-08-26

Last updated on: 2025-10-24

Assigner: Citrix Systems, Inc.

Description
Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers (OR) CR virtual server with type HDX
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-08-26
Last Modified
2025-10-24
Generated
2026-06-16
AI Q&A
2025-08-26
EPSS Evaluated
2026-06-15
NVD
CVE-2025-7775
Affected Vendors & Products
Showing 8 associated CPEs
Vendor Product Version / Range
citrix netscaler_application_delivery_controller From 12.1 (inc) to 12.1-55.330 (exc)
citrix netscaler_application_delivery_controller From 12.1 (inc) to 12.1-55.330 (exc)
citrix netscaler_application_delivery_controller From 13.1 (inc) to 13.1-37.241 (exc)
citrix netscaler_application_delivery_controller From 13.1 (inc) to 13.1-37.241 (exc)
citrix netscaler_application_delivery_controller From 13.1 (inc) to 13.1-59.22 (exc)
citrix netscaler_application_delivery_controller From 14.1 (inc) to 14.1-47.48 (exc)
citrix netscaler_gateway From 13.1 (inc) to 13.1-59.22 (exc)
citrix netscaler_gateway From 14.1 (inc) to 14.1-47.48 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a memory overflow issue in NetScaler ADC and NetScaler Gateway products. It can lead to Remote Code Execution and/or Denial of Service when NetScaler is configured as a Gateway (such as VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server. It also affects certain load balancing virtual servers (HTTP, SSL, HTTP_QUIC) bound with IPv6 services or service groups, and CR virtual servers of type HDX.

Impact Analysis

The vulnerability can allow attackers to execute arbitrary code remotely or cause a denial of service on the affected NetScaler ADC and Gateway devices. This can disrupt network services, potentially allowing unauthorized access or causing service outages.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-7775. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart