by Kastro
Paper/Archive/CVE-2025-7775

CVE-2025-7775

NetScaler ADC — Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service

KEV · due 28 AugEPSS 21%public exploitSSVC actCVSS 9.2
critical.is priorityof 100
97
CVSS 9.2 (CNA)9.2 / 10 × 3027.6In CISA KEV+3030.0EPSS percentile 97.5.975 × 2019.5Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers (OR) CR virtual server with type HDX

Affected

ProductAffectedFixed inSource
ADC14.1 – < 47.4847.48CNA
ADC13.1 – < 59.2259.22CNA
ADC13.1 FIPS and NDcPP – < 37.24137.241CNA
ADC12.1 FIPS and NDcPP – < 55.33055.330CNA
Gateway14.1 – < 47.4847.48CNA
Gateway13.1 – < 59.2259.22CNA
Gateway13.1 FIPS and NDcPP – < 37.24137.241CNA
Gateway12.1 FIPS and NDcPP – < 55.33055.330CNA

Scores by source

Citrix (CNA)9.2CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
CISA ADPSSVCExploitation: active · Automatable: no · Technical impact: total

References

refsupport.citrix.com/support-home/kbsearch/article?articleNumber=CTX694938refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-7775kevcisa.gov/known-exploited-vulnerabilities-catalog