Critical Memory Overflow (CVE-2025-7775) in Citrix NetScaler ADC/Gateway Enables Remote Code Execution
What It Is — Citrix NetScaler ADC and NetScaler Gateway contain a memory‑overflow vulnerability (CVE‑2025‑7775) that can be triggered remotely to achieve unauthenticated code execution or cause a denial‑of‑service condition.
Exploitability — The vulnerability is publicly disclosed; proof‑of‑concept code is available. CVSS v3.1 base score 9.8 (Critical), indicating a high likelihood of remote exploitation without authentication.
Affected Products — Citrix NetScaler ADC (all supported versions) and NetScaler Gateway.
Why It Matters for Trust & Control Assurance
- Demonstrates the need for continuous vulnerability monitoring and timely patch deployment as evidence of due‑diligence.
- Unpatched RCE flaws undermine the “Vulnerability Management” control objective, affecting audit readiness across frameworks (e.g., NIST CSF Identify & Protect).
- Provides a concrete test case for the Control Mapping capability: mapping remediation to a single control objective that satisfies multiple compliance regimes.
Recommended Actions
- Verify current NetScaler version against the Citrix advisory and apply the latest security patch.
- Update your asset inventory to flag all NetScaler instances as high‑risk assets.
- Run an authenticated scan to confirm remediation and retain scan reports for audit evidence.
- Incorporate patch‑status checks into your continuous monitoring pipeline.
- Document the remediation workflow in your Trust Center for stakeholder review.
Source: CISA KEV – CVE‑2025‑7775