VulnerabilityDeferred

CVE-2025-8424

Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway when an attacker can get access to the appliance NSIP, Cluster Management IP or local GSLB Site IP or SNIP with Management Access

HIGH 8.7EPSS 2.82%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (2.82%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway when an attacker can get access to the appliance NSIP, Cluster Management IP or local GSLB Site IP or SNIP with Management Access

CVSS 4.0: 8.7 HIGHCVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 2.82% probability · 86th percentile
CISA KEV: Not listed
Weakness: CWE-1284
Source: secure@citrix.com

References

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694938

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.