Research · Jun 17, 2025 · ZeroDay Catalog
Out-of-Bounds Read Vulnerability in Citrix NetScaler ADC and Gateway
Citrix has identified an out-of-bounds read vulnerability in its NetScaler ADC and Gateway products, which could lead to significant security risks.
What changed
Citrix has disclosed an out-of-bounds read vulnerability affecting its NetScaler ADC and Gateway products. This vulnerability arises from insufficient input validation and can result in memory overread under specific configurations.
- The vulnerability is particularly critical when the NetScaler is set up as a Gateway, including VPN virtual server, ICA Proxy, CVPN, RDP Proxy, or AAA virtual server.
- Exploitation of this vulnerability could potentially expose sensitive information stored in memory.
Who is affected
Organizations utilizing Citrix NetScaler ADC and Gateway products are at risk due to this vulnerability. The following groups should take immediate notice:
- Citrix NetScaler ADC users, especially those using it for VPN or remote desktop services.
- Enterprises relying on Citrix for application delivery and access management.
- IT departments managing Citrix infrastructure and security protocols.
What to do
It is crucial for affected organizations to assess their current configurations and apply necessary updates or patches provided by Citrix. Immediate actions include:
- Review Citrix's security advisories for detailed information on the vulnerability.
- Implement any available patches or updates to mitigate the risk.
- Monitor systems for unusual activity that may indicate exploitation attempts.