Advisory 2025-1767 - Citrix Systems ADC and NetScaler Gateway: Multiple Vulnerabilities

Operating System

• Appliance
• Sonstiges

Software

• Citrix Systems ADC 12.1-FIPS < 12.1-55.330
• Citrix Systems ADC 12.1-NDcPP < 12.1-55.330
• Citrix Systems ADC < 13.1-59.22
• Citrix Systems ADC 13.1-FIPS < 13.1-37.241
• Citrix Systems ADC 13.1-NDcPP < 13.1-37.241
• Citrix Systems ADC < 14.1-47.48
• Citrix Systems NetScaler Gateway < 13.1-59.22
• Citrix Systems NetScaler Gateway < 14.1-47.48

Attack

A remote anonymous attacker or an attacker from an adjacent network can exploit multiple vulnerabilities in Citrix Systems ADC and Citrix Systems NetScaler Gateway in order to execute arbitrary code, to gain elevated privileges, to cause a Denial of Service condition or to perform other, unspecified attacks.

Description

Citrix Application Delivery Controller (ADC) is a solution for application provisioning and load balancing. Citrix NetScaler is an integrated solution for acceleration, traffic management and security for web applications. Citrix Access Gateway is a universally deployable SSL-VPN. Advanced Access Control (AAC) enables administrators to define access controls for the Access Gateway.

There is a vulnerability in Citrix Systems ADC and NetScaler Gateway. Improper restriction of operations within the bounds of a memory buffer leads to a memory overflow vulnerability. The vulnerability only affects specific configurations, including systems configured as Gateway or AAA virtual servers and load balancing virtual servers of types HTTP, SSL, or HTTP_QUIC bound with IPv6 or DBS IPv6 services, as well as content routing virtual servers of type HDX. A remote, anonymous attacker can exploit this vulnerability to execute arbitrary code or cause a denial of service condition. Reports indicate that this vulnerability can be used to deploy webshells and gain persistent backdoor access to targeted organizations.

There is a vulnerability in Citrix Systems ADC and NetScaler Gateway. Improper restriction of operations within the bounds of a memory buffer leads to a memory overflow vulnerability. A remote anonymous attacker can exploit this vulnerability to cause a Denial of Service condition and to perform unspecified attacks. The issue is limited to instances where NetScaler is configured as a Gateway virtual server with a PCoIP profile bound to it.

There is a vulnerability in Citrix Systems ADC and NetScaler Gateway. This flaw exists due to improper access control in the NetScaler Management Interface. An attacker from an adjacent network with access to NSIP, Cluster Management IP, local GSLB Site IP, or SNIP with management access can exploit this vulnerability to gain elevated privileges.

The rating of the risk of this Advisory is based on the maximum values of all vulnerabilities. So the over all value is major than the value of the separate vulnerabilities.