CVE-2025-8424
BaseFortify
Publication date: 2025-08-26
Last updated on: 2025-08-29
Assigner: Citrix Systems, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| citrix | netscaler_gateway | 4.0 |
| citrix | netscaler_adc | 4.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-1284 | The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an improper access control issue in the NetScaler Management Interface of NetScaler ADC and NetScaler Gateway. It occurs when an attacker gains access to the appliance NSIP, Cluster Management IP, local GSLB Site IP, or SNIP with Management Access, potentially allowing unauthorized actions on the device.
How can this vulnerability impact me? :
The vulnerability can allow an attacker with access to certain management IPs to bypass proper access controls, potentially leading to unauthorized control or manipulation of the NetScaler appliance, which could compromise network security and availability.