Citrix · NetScaler ADC and Gateway
CVE-2025-5777
NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread
ما هي
Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
CISA: Citrix NetScaler ADC and Gateway contain an out-of-bounds read vulnerability due to insufficient input validation. This vulnerability can lead to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server.
ما العمل
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
الموعد النهائي للوكالات الفدرالية الأمريكية: 11 يوليو 2025
ثغرات مُستغلّة أخرى من Citrix
| أُضيفت | الثغرة | المنتج | الخطورة | احتمال الهجوم |
|---|---|---|---|---|
| 30/06/2025 | Buffer Overflow | NetScaler ADC and Gateway | حرجة 9.2 | 10% |
| 04/10/2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer | NetScaler | مرتفع 8.7 | 11% |
| 27/09/2026 | Improper Input Validation | NetScaler | حرجة 9.5 | 82% |
| 27/09/2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer | NetScaler | حرجة 9.5 | 78% |
| 09/09/2026 | Authentication Bypass Using an Alternate Path or Channel | NetScaler | حرجة 9.3 | 33% |
| 26/08/2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer | NetScaler ADC and NetScaler Gateway | مرتفع 8.8 | 1.0% |
| 30/03/2026 | Out-of-Bounds Read | NetScaler | حرجة 9.3 | 91% |
| 26/08/2025 | Memory Overflow | NetScaler | حرجة 9.2 | 21% |
المصادر: Known Exploited Vulnerabilities (CISA، ملكية عامة)، وCVE records (cve.org)، وEPSS (FIRST). احتمال الهجوم هو تقدير EPSS لاحتمال أن يحاول أحد استغلال الثغرة خلال الأيام الـ30 القادمة.