CVE-2025-7775 Details
Description
Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers (OR) CR virtual server with type HDX
A memory overflow vulnerability has been identified in Citrix NetScaler ADC and NetScaler Gateway. This vulnerability can lead to remote code execution and/or denial-of-service. It is present in NetScaler versions 14.1 prior to 14.1-47.48, 13.1 prior to 13.1-59.22, as well as in NetScaler ADC 13.1-FIPS and NDcPP versions prior to 13.1-37.241-FIPS and NDcPP, and NetScaler ADC 12.1-FIPS and NDcPP versions prior to 12.1-55.330-FIPS and NDcPP. The vulnerability occurs under several conditions: when NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server; or when LB virtual servers of type HTTP, SSL, or HTTP_QUIC are bound with IPv6 services or service groups containing IPv6 servers, or DBS IPv6 services or groups with IPv6 DBS servers. Additionally, CR virtual servers of type HDX are affected.
Affected customers should upgrade to NetScaler ADC and NetScaler Gateway versions 14.1-47.48 or later, 13.1-59.22 or later, 13.1-37.241-FIPS and NDcPP or later, or 12.1-55.330-FIPS and NDcPP or later. NetScaler ADC and NetScaler Gateway versions 12.1 and 13.0 are now End Of Life and no longer supported.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Aug 27, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-7775 | CISA-ADP | US Government Resource |
| https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694938 | [email protected] | Vendor Advisory |
This CVE is in CISA's Known Exploited Vulnerabilities Catalog
Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.
| Vulnerability Name | Date Added | Due Date | Required Action |
|---|---|---|---|
| Citrix NetScaler Memory Overflow Vulnerability | Aug 26, 2025 | Aug 28, 2025 | Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-119 | Improper Restriction of Operations within the Bounds of a Memory Buffer | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| citrix netscaler application delivery controller | >= 12.1, < 12.1-55.330 >= 13.1, < 13.1-37.241 >= 13.1, < 13.1-59.22 >= 14.1, < 14.1-47.48 |
CPE
Remediation
| |
| citrix netscaler gateway | >= 13.1, < 13.1-59.22 >= 14.1, < 14.1-47.48 |
CPE
Remediation
| |
Change History
9 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Oct 24, 2025 | Modified Analysis | [email protected] |
| Oct 21, 2025 | CVE Modified | CISA-ADP |
| Oct 21, 2025 | CVE Modified | CISA-ADP |
| Oct 21, 2025 | CVE Modified | CISA-ADP |
| Aug 27, 2025 | Initial Analysis | [email protected] |
| Aug 27, 2025 | CVE CISA KEV Update | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government |
| Aug 26, 2025 | New CVE Received | [email protected] |