CVE-2022-27518

🗓️ 13 Dec 2022 17:14:15Reported by CitrixType

Unauthenticated remote code execution vulnerabilit

Reporter	Title	Published	Views	Family All 17
Rapid7 Blog	CVE-2022-27518: Critical Fix Released for Exploited Citrix ADC, Gateway Vulnerability	13 Dec 202223:19	–	rapid7blog
CISA KEV Catalog	Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability	13 Dec 202200:00	–	cisa_kev
AttackerKB	CVE-2022-27518	13 Dec 202200:00	–	attackerkb
CISA	Citrix Releases Security Updates for Citrix ADC, Citrix Gateway	13 Dec 202200:00	–	cisa
Tenable Nessus	Citrix ADC and Citrix Gateway RCE (CTX474995)	13 Dec 202200:00	–	nessus
Wiz blog	CVE-2022-27518 exploited in the wild by APT5: everything you need to know	13 Dec 202221:03	–	wizblog
Cvelist	CVE-2022-27518 Unauthenticated remote arbitrary code execution	13 Dec 202200:00	–	cvelist
NVD	CVE-2022-27518	13 Dec 202217:15	–	nvd
Citrix	Citrix ADC and Citrix Gateway Security Bulletin for CVE-2022-27518	13 Dec 202212:01	–	citrix
Prion	Remote code execution	13 Dec 202217:15	–	prion

Nvd

Node

citrix application_delivery_controller_firmwareRange12.1–12.1-55.291fips

citrix application_delivery_controller_firmwareRange12.1–12.1-55.291ndcpp

citrix application_delivery_controller_firmwareRange12.1–12.1-65.25

citrix application_delivery_controller_firmwareRange13.0–13.0-58.32

AND

citrix application_delivery_controllerMatch-

Node

citrix gateway_firmwareRange12.1–12.1-65.25

citrix gateway_firmwareRange13.0–13.0-58.32

AND

citrix gatewayMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "Citrix Gateway, Citrix ADC ",
    "vendor": "Citrix",
    "versions": [
      {
        "status": "affected",
        "version": "12.1"
      },
      {
        "status": "affected",
        "version": "13.0"
      },
      {
        "status": "affected",
        "version": "12.1 FIPs, NDcPP"
      }
    ]
  }
]

Source	Link
support	www.support.citrix.com/article/CTX474995

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Dec 2022 17:15Current

9.8High risk

Vulners AI Score9.8

CVSS39.8

EPSS0.19