CVE-2025-7775

Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service

En bref

Sévérité: CRITICAL 9.2
Exploitation: Exploitation connue (CISA KEV) · ajoutée le 2025-08-26
Exploitée selon l'ENISA depuis le 2025-08-26
EPSS: EPSS 20.67 % · centile 98 (2026-10-27)
État: PUBLISHED
Publiée: 2025-08-26
Mise à jour: 2026-02-26
Attribuée par: Citrix
Statut NVD: Analyzed

Description

Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers (OR) CR virtual server with type HDX

Scores

Version	Score	Vecteur	Évalué par
CVSS 4.0	CRITICAL 9.2	CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L	Citrix
CVSS 4.0	CRITICAL 9.2	CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X	NVD · secure@citrix.com (Secondary)
CVSS 3.1	CRITICAL 9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	NVD · nvd@nist.gov (Primary)

Faiblesses (CWE)

CWE-119

Références européennes

ENISA EUVD · EUVD-2025-25838
GCVE · GCVE-0-2025-7775

Avis du CERT-FR

CERTFR-2025-AVI-0730 — Multiples vulnérabilités dans Citrix NetScaler ADC et NetScaler Gateway · cert.ssi.gouv.fr
CERTFR-2025-ALE-012 — Vulnérabilité dans Citrix NetScaler ADC et NetScaler Gateway · cert.ssi.gouv.fr

Configurations affectées (CPE NVD)

cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:* ≥ 12.1 < 12.1-55.330
cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:* ≥ 12.1 < 12.1-55.330
cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:* ≥ 13.1 < 13.1-37.241
cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:* ≥ 13.1 < 13.1-37.241
cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:* ≥ 13.1 < 13.1-59.22
cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:* ≥ 14.1 < 14.1-47.48
cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:* ≥ 13.1 < 13.1-59.22
cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:* ≥ 14.1 < 14.1-47.48

Produits affectés

Produit	Versions
NetScaler · ADC	affected 14.1 < 47.48 ; affected 13.1 < 59.22 ; affected 13.1 FIPS and NDcPP < 37.241 ; affected 12.1 FIPS and NDcPP < 55.330
NetScaler · Gateway	affected 14.1 < 47.48 ; affected 13.1 < 59.22 ; affected 13.1 FIPS and NDcPP < 37.241 ; affected 12.1 FIPS and NDcPP < 55.330

Références

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
CISA Known Exploited Vulnerabilities	CC0 1.0
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD