Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-8424

Improper access control on the NetScaler Management Interface

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Citrix

Description

Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway when an attacker can get access to the appliance NSIP, Cluster Management IP or local GSLB Site IP or SNIP with Management Access

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NetScaler ADC

Default version status: unaffected

  • 14.1 to < 47.48affected
  • 13.1 to < 59.22affected
  • 13.1 FIPS and NDcPP to < 37.241affected
  • 12.1 FIPS and NDcPP to < 55.330affected

NetScaler Gateway

Default version status: unaffected

  • 14.1 to < 47.48affected
  • 13.1 to < 59.22affected
  • 13.1 FIPS and NDcPP to < 37.241affected
  • 12.1 FIPS and NDcPP to < 55.330affected

References